Who would be identified as an external stakeholder when soliciting feedback on a business case associated with a new system upgrade to satisfy new regulations?