Effective risk professionals are skilled in the art of anticipation.
The crucial question to ask is: “What if . . .”
So, what if the owner, developer, maintainer and updater of your enterprise mission critical software application(s) suddenly . . . vanishes?
How will you access the source code of that application in order to protect the enterprise investment and ongoing business processes depending on the app?
You could be contemplating choppy seas if the source code for the app has not been lodged and verified in a Software Escrow arrangement . . .