Researchers have identified the software and businesses that provide critical information technology products and services and developed a framework to continue this analysis as technology evolves. Assessing software risk, business risk, and interdependencies among businesses, the authors recognize that highest revenue does not necessarily equal greatest risk.