CM of software systems that include acquired or reused components presents a
complex challenge. The schedules and frequency of new releases, updates, and
security (and nonsecurity) patches, and response times for technical support
by acquired or reused software suppliers, are beyond the control of both