If the software is an off the shelf package that requires little configuration this is normally less risky than configurable software or that which is written in house.
If the software is an off the shelf package that requires little configuration this is normally less risky than configurable software or that which is written in house.