risk management notes
|
If we did not have risk in the world, we would have no need for testing. Definitions of risk
Some are listed below
Risk Management
Strategy
Rational Unified Process
(RUP) A pointed comparison is made with the Waterfall approach to development. For the same project, the risk of failure is at the same high level for both RUP and Waterfall approaches. However as the project progresses the risk become significantly less for the RUP managed project. Whilst for the Waterfall approach, risk remains high for far longer. Typically until there is a big bang system and integration test. Risk Diagram for RUP The RUP tries to systematically reduce the risk of failure as the project progresses through each phase. These are Inception, Elaboration, Construction and Transition Within each phase a number of iterations take place. Each phase is completed with the passing of a major milestone. The phases are defined by the state of the project, which in turn are defined by the risks to be mitigated.
During Inception and Elaboration the solutions are very broad brush stroke, or "Coarse". As each the phases and iterations progress, the solutions become finer and the system more integrated. As the product is increasingly integrated, it can be shown to stakeholders for feedback. The further into the project risk is further reduced by successfully freezing the requirements. CMMI The CMMI is not a methodology but a framework for process improvement, against which organisations can be assesse. There are 5 maturity levels. Organisations at Capability Level 1 are performing processes that contribute to development, but the processes are "adhoc and chaotic". At level 5 the organisation is highly optimised. Defects hardly ever occur due to a culture of eradicating them before they can exist. Having a Risk Management Strategy is one of the requirements to attain level 3, or defined process. The CMMI labels the process of managing risk as a Project Management activity. Risk management should address issues that could endanger achievement of critical objectives. The organisation must continously and effectively, anticipate and mitigate risk. Overall the tone is early and aggressive risk identification, by all stakeholders in the project. Internal and external risks have to be considered. Risk management under the CMMI consists of three sections:-
Initially organisations can choose to just identify the risks and slowly build up to the full strategy. Currently the hottest topics in risk are the Sarbanes-Oxley Act and Basel II. Sarbanes-Oxley is the American legislation that places a duty on companies to disclose large amounts of financial information. Basel II requires banks to keep regulatory capital that is suitable for their risk profile.
|
Similar Articles Selected Books
|