Risk Management
in Software
Engineering
AKSHAY SINGH
SHEKHAWAT
23BMA006
•Contents
01 03 05
Introduction Risk
Risk Assessment
to Risk Monitoring
Methods
Management and Control
02 04 06
Tools and
Risk Risk
Techniques for
Identification Mitigation
Risk
Techniques Strategies
Management
01 Introduction to Risk Management
3
Defining Software Risk
03
02 Why Manage Risks?
Effective risk management
01 Risk vs. Issue
minimizes negative impacts on
project timelines, budgets, and
An issue is a problem that's
What is Risk? quality. It enables proactive
happening now; whereas, a risk
decision-making and resource
is a potential problem that could
In software, risk refers to any allocation to prevent possible
occur in the future. Managing
uncertain event that could pitfalls.
risks involves planning and
negatively affect a project's
preparation, while issues require
outcome — such as tool failures,
real-time problem-solving.
team attrition, or scope changes.
Examples of software risks:
• Changing requirements
• Budget overruns
• Tech stack incompatibility
Importance of Risk Management in Software Engineering
Complexity of Software Impact on Project
Regulatory Compliance
Projects Success
01 02 03
Modern software projects Neglecting risk management Certain industries require strict
involve myriad technologies can lead to project failures, cost adherence to regulatory
and dependencies. Risk overruns, and missed standards. Risk management
management helps teams deadlines. According to the ensures compliance and avoids
navigate this complexity, Standish Group, 31% of potential legal repercussions.
ensuring smoother software projects are canceled
development processes. before completion — many due
to unmanaged risks.
Overview of the Risk Management Process
Risk Identification Risk Assessment Risk Mitigation Risk Monitoring and
Control
Identifying all potential risks Evaluating the likelihood and Developing strategies to Continuously tracking
that could impact the potential impact of each reduce the probability or identified risks and
software project, this includes identified risk. This step impact of risks. Mitigation implementing mitigation
brainstorming, checklists, and involves qualitative and plans may include avoidance, plans. This involves regular
historical data analysis. quantitative analysis transfer, or acceptance reviews and adjustments to
techniques. strategies. address emerging issues.
02 Risk Identification Techniques
7
Brainstorming Sessions
Gathering the Team Facilitating the Session
Assemble a diverse team with 1 2 Appoint a facilitator to guide
various expertise to brainstorm focused, open brainstorming, and
potential project risks, ensuring ensure every idea is captured.
different perspectives.
3
Documenting Results
Document all identified risks, including their potential impact and likelihood;
this supports further analysis and planning.
03 Risk Assessment Methods
9
Qualitative Risk Assessment
01 02 03
Probability and Impact Risk Scoring Expert Judgment
Matrix
Use a matrix to categorize risks Assign scores to risks based on their Involve experienced team members
based on their probability and likelihood and impact; high scores to evaluate risks based on their
potential impact. This helps indicate risks requiring immediate expertise, providing valuable
prioritize risks for mitigation. attention. insights.
Quantitative Risk Assessment
1 3
2
Monte Carlo Simulation Expected Monetary Value (EMV)
Use Monte Carlo simulation to model the Calculate the expected monetary value of
Decision Tree Analysis
potential impact of risks on project each risk to prioritize mitigation efforts
outcomes, by running numerous Employ decision tree analysis to evaluate based on potential financial impact.
simulations. different risk scenarios and their
associated costs, supporting informed
decision-making.
04 Risk Mitigation Strategies
12
Risk Avoidance
Changing Project Scope Selecting Alternative Careful Planning
Technologies
Modify the project scope or Choose alternative technologies Invest in detailed planning and
requirements to eliminate the or methodologies that are less analysis to avoid risks
risk altogether, thus preventing prone to specific risks, ensuring associated with uncertainty,
potential negative impacts. smoother project execution. improving predictability.
Example: Switching from a
legacy API to a modern, well-
supported one to avoid
integration issues.
Risk Acceptance
01 03
Contingency Plans
02 Monitoring
Develop contingency plans to Budget Reserves Continuously monitor accepted
address risks if they occur, risks to detect any changes in their
minimizing potential damage. Set aside budget reserves to cover probability or impact, allowing for
Example: Accepting the risk of potential costs associated with proactive adjustments.
third-party library downtime, but accepted risks, providing financial
preparing backup solutions in the flexibility.
deployment pipeline.
05 Risk Monitoring and Control
15
Regular Risk Reviews
Scheduled Meetings Stakeholder Involvement Documentation
Conduct regular meetings to review Involve relevant stakeholders in Document changes in risk status
the status of identified risks and risk reviews to gather diverse and mitigation plan effectiveness;
mitigation plans, ensuring perspectives and ensure alignment, this supports informed decision-
continuous oversight. promoting collaborative decision- making and continuous
making. improvement.
06 Tools and Techniques for Risk Management
17
Software Tools
Spreadsheets
Use spreadsheets to track and manage risks, providing
a simple and accessible solution.
Specialized Software
Implement specialized risk management software to
automate risk assessment, tracking, and reporting,
improving efficiency.
Project Management Software
Integrate risk management features into project
management software, streamlining risk management
processes.
Thank you