Risk management in Software Engineering Term Paper By

Risk management in Software Engineering Term Paper By Praveenkumar Sammita CSC 532

INTRODUCTION What is Risk? A Risk is a possibility of suffering harm or loss or danger. What is Risk management? It’s a software engineering practice with processes, methods and tools for managing risks in a project.

What is the need for Risk management? Software development involves Ø Ø Ø New technology Challenging or unknown requirements tight schedules All these makes the software project prone to several types of risk. After the risks are identified, Risk management develops plans for mitigating risk before they sabotage the projects.

Implementing Risk management Steps involved in implementing risk management Identify new risks Ø Evaluate new risks Ø Classify new risks Ø Prioritize new risks Ø Planning Risk mitigation Ø Tracking Risks and mitigation plans Ø Reviewing and adjusting mitigation plans Ø

Installation of risk management 10 5 5

Identify new risks Ø write down the risk and make them visible to all. Ø • • A risk can be caused by Diminished quality of the product Increased costs Delayed completion Total program failure Ø Don’t depend on managers to recognize and articulate all possible problems. Ø Make a large list of 100 or more analyzed and priority-ordered risk statements

Evaluate new risks Ø A risk should be quantified by its probability and impact. Ø Assess the probability of a future event and estimate its cost. Ø Don’t make a detailed quantitative assessment of probability and impact for one risk. Ø An effective way is to avoid early quantification of impact and probability unless the risk has a significant impact on the program.

Classify new risks Ø Classify or group risks statements in to categories based on shared characteristics can help us solve global risks. Ø • With a single risk, A configuration manager might see an aspect that affect configuration management. • A software engineer might see an aspect that affects component quality. • A project manager might see an aspect that affects the customer.

Prioritize new risks Ø The organization should deal with the most important risks first and should decide how many of these it has the resources to mitigate. Ø A group’s weekly prioritization of the top n risks results in constant thrashing and some risks move on and off the priority list such that the action on the most important risk will be taken first to avoid the sabotage of the whole project.

Planning Risk mitigation Ø To mitigate a risk, the goal and constraints must be known. Ø We can use problem solving and analytical techniques to develop strategies and guide our actions. Resolution can be a single action item or a complex, long range prototyping effort. Ø Mitigation plans can be action item lists or the equivalent of task plans.

Tracking risks and mitigation plans Ø Documentation of risks like in spreadsheets summarize the project’s risks well. Ø For important risks, we may need backup data. Ø Complex tracking reports are needed for critical risks. Ø An effective portrayal of risk exposure vs time is the mitigation status report, to monitor mitigation progress on critical risk.

Reviewing and adjusting mitigation plans Controlling a risk involves § Altering the mitigation strategy when it becomes ineffective. § Taking action on a risk that becomes important enough to require mitigation. § Taking a preplanned contingency action. § Dropping to a watch-only mode at a specific threshold. § Closing the risk when it no longer exists.

Risk and mitigation plan database Ø Information is only useful if it’s accessible and easy to understand. Ø Its very effective to to use electronic databases to implement and support risk management. Ø It requires extra effort and time to set up a database when compared to paper-based risk documentation systems. Ø Integrating risk data with other types of data such as problem and safety reports will present risk data in a meaningful way to users.

Conclusion Ø So, An effective risk management focusses on avoiding future problems rather than solving the current ones. Ø With effective risk management, people recognize and deal with potential problems daily before they occur and produce the finest product they can within the budget and schedule constraints. Ø People and workgroups understand that they are building just one end product and have a shared vision of a successful outcome.

References Ø Risk management for software projects. Fairley, R. ; Software, IEEE , Volume: 11 , Issue: 3 , May 1994 Pages: 57 - 67 Ø Managing commitments and risks: challenges in distributed agile development Kontio, J. ; Hoglund, M. Ryden, J. ; Abrahamsson, P. ; Software Engineering, 2004. ICSE 2004. Proceedings. 26 th International Conference on , 23 -28 May 2004 Pages: 732 - 733 Ø Putting risk management into practice. Williams, R. C. ; Walker, J. A. ; Dorofee, A. J. ; Software, IEEE , Volume: 14 , Issue: 3 , May-June 1997 Pages: 75 - 82

Thank You! Any Questions?