ABSTRACT
The application of the Risk Audit Approach involves a developer (the organization) requiring a new application system for one of its core business functions. The organization had determined that it lacked the skills internally and that the software development was not one of its core businesses. Therefore, executive management decided to outsource the development.
