What is Software Risk and Risk Management

Software Risk: A potential problem that may or may not occur in the future, often caused by a lack of information, control, or time. If a risk becomes a reality, it can lead to unwanted consequences or loss, such as project delays, budget overruns, or poor software quality.

Software Risk Management: A systematic process to help a team understand, analyze, and manage this uncertainty throughout the project lifecycle. Its goal is to identify potential barriers, evaluate their severity, and implement strategies to avoid, mitigate, or control their impact.

Types of Risk Management

There are two types of risk management

Reactive Risk Management

• This is often called "fire fighting mode". The team does nothing about risks until a problem actually occurs.
• When a problem hits, the team immediately jumps into action to correct it, often resulting in crisis management and putting the entire project in jeopardy. It's an ad-hoc and costly approach.

Proactive Risk Management

• This strategy begins long before any technical work starts.
• The team actively identifies potential risks, assesses their probability and impact, and establishes a plan for managing them (a contingency plan).
• The primary objective is to avoid the risk where possible, and for unavoidable risks, to respond in a controlled and effective manner.

Types of Software Risks

There are three primary categories of risks that threaten a software project, plus a classification based on their predictability.

Project Risks

Project risks threaten the overall project plan and its ability to be completed successfully.

• Impact: If these risks become real, they will likely cause the project schedule to slip and costs to increase significantly.
• Focus Areas: They relate to potential problems with budget, schedule, resources (staffing/personnel), and customer/requirements issues.
• Factors: Project complexity, the size of the final software, and the degree of structural uncertainty are all considered project risk factors.

Technical Risks