A Process for Risk Management in Software Projects

• Pascale Correia Rocha Pereira UNIFOR
• Fca. Márcia G. S. Gonçalves UNIFOR / Instituto Atlântico
• Carlo Giovano Pires Instituto Atlântico
• Arnaldo Dias Belchior UNIFOR

DOI: https://doi.org/10.5753/sbqs.2006.15614

Abstract

Risk Management has become more notable in software development projects, as uncertainty is inherent to this kind of projects. Risk management leads the organization to systematically plan, anticipate, and mitigate risks to proactively eliminate or minimize their impact on the project. This paper proposes a software risk management process based on concepts of the RUP, on risk approaches of CMMI-SW, PMBOK, IEEE STD 1540 and AS/NZS 4360. After that, it presents the process matching and implementing in an organization, aiming to follow CMMI level 3 requirements for risk management.

Keywords: Risk Management, Software Projects, RUP

References

AS/NZS 4360 (2004) “Australian/New Zealand Standard for Risk Management”. Boehm, B. W. Software Risk Management: Principles and Practices, IEEE Software. V. 8. N. 1. p. 32-41, Jan. 1991.

Brown, N. (1996) “Industrial - Strength Management Strategie, IEEE”.

CMMI Product Team. (2002) “CMMI for Systems Engineering/Software Engineering”, Version 1.1 Staged Representation (CMU/SEI-2002-TR-029, ESC-TR-2002-029). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University.

Gusmão, C. M. G., Moura, P. H. (2003) “ISO, CMMI, and PMBOK Risk Management: a Comparative Analysis”. The International Journal of Applied Management and Technology, Volume 1, Number 1.

IEEE Std 1540. (2001) “Standard for Software Life Cycle Processes-Risk Management”.

ISO/IEC 15504. (2003) “Software Process Assessment”.

Kroll, Per & Kruchten, Philippe. (2003) “The Rational Unified Process made easy: a practitioner's guide to the RUP”, Pearson Education.,

Machado, C. A. F. (2002) “A-Risk: Um Método para Identificar e Quantificar Risco de Prazo de Projetos de Desenvolvimento de Software”, Dissertação de Mestrado, PUC-PR, Curitiba.

Pereira, P. C. R. (2005) “Um Processo de Gerenciamento de Riscos para Projetos de Software”, Dissertação de Mestrado, Universidade de Fortaleza (Unifor), Novembro, 2005.

PMBOK. (2004) PMI Standards Committee. “A Guide to the Project Management Body of Knowledge”, Third Edition, PMI Publishing Division, Philadelphia, USA.

Reinehr, S.S., Balduino, R., Machado, C. A. F., Pessoa, M. S. (2003) “Implementing ISO/IEC 12207 Standard using Rational Unified Process”. Software Engineering Research and Practice.

RUP. (2003) “Rational Unified Process”, Version 2003.06.00.65, CD-ROM. Rational Software Corporation, Cupertino, California.

SCAMPI. (2001) Standard CMMISM Appraisal Method for Process Improvement (SCAMPISM), Version 1.1: Method Definition Document. CMU/SEI-2001-HB-001.

Sommerville, Ian. (2003) “Engenharia de software”. 7. ed. São Paulo: Addison Wesley.