When using a third party source, they may also audit the product realization of an organization