"Many smaller organizations do not have any artifacts other than their requirements documents and source code." . . . . .