A Roadmap of Risk Diagnostic Methods: Developing an Integrated View of Risk Identification and Analysis Techniques

Abstract : This technical note illustrates the concept and value of the Risk Diagnostic Roadmap (RDR), which is envisioned to be a comprehensive reference tool for risk identification and analysis (RI&A) techniques. Program Managers (PMs) responsible for developing or acquiring software-intensive systems typically identify risks in different ways. Some PMs and consultants rely on free-form brainstorming or volunteered statements. Others select risk diagnostic methods based on convenience and familiarity. Both approaches are focused more on the experience and knowledge of the PM and/or consultant than on the requirements of the program. Researchers at the Carnegie Mellon (Trademark) Software Engineering Institute are developing an alternative approach in the form of the RDR. The RDR is populated with an "appropriate" set of risk diagnostic methods. The road map enables PMs to compare risk diagnostic methods and choose the best method(s) for their particular situation. This technical note describes the evolution of the RDR and presents the attributes that qualify risk diagnostic tools as "appropriate" for the road map. SEI researchers then use these attributes to select three candidate risk diagnostic methodologies for inclusion in the RDR.