How to modernize risk management when software creation becomes broadly distributed.