A quantitative risk model-building method for offshoring IT applications | IEEE Conference Publication | IEEE Xplore