An Optimization Model of CMMI-Based Software Project Risk Response Planning

Risk response planning is of importance for software project risk management (SPRM). In CMMI, risk management was in the third capability maturity level, which provides a framework for software project risk identification, assessment, risk planning, risk control. However, the CMMI-based SPRM currently lacks quantitative supporting tools, especially during the process of implementing software project risk planning. In this paper, an economic optimization model for selecting risk reduction actions in the phase of software project risk response planning is presented. Furthermore, an example taken from a Chinese software industry is illustrated to verify the application of this method. The research provides a risk decision method for project risk managers that can be used in the implementation of CMMI-based SPRM.

• Chun-guang Pan
• Ying-wu Chen

• Software project
• risk management
• CMMI
• riskresponse planning.

[1] B.Boehm. A Spiral Model of Software Development and Enhancement,
Tutorial: Software Engineering Project Management, Thayer, R.H. (ed.),
IEEE Computer Society Press, Washington, DC, pp.128-142,1987
[2] Mark C. Paulk, Charles V. Weber,etc. Key Practices of the Capability
Maturity Model, SM, Version1.1. Technical Report,
CMU/SEI-93-TR-025,ESC-TR-93-178,1993.
[3] Ben-David, T Raz. An integrated approach for risk response development
in project planning(J),Journal of the Operational Research
Socety(2001)52:14-25.
[4] Rafael Prikladnicki et al., Risk management in distributed software
development: a process integration proposal.
http://www.inf.pucrs.br/munddos/docs/PRO-VE2004_prikladnicki_risk.
pdf
[5] Crispin Piney. Risk response planning: selecting the right strategy.
http://www.risksig.com/Articles/euro2002/1001.pdf.
[6] Boehm B.W., Software risk management (M), IEEE Computer Society
Press.CA,1989.
[7] Boehm B.W., Software Risk Management: Principles and Practices (J).
IEEE Software,8(1): 32-41,1991.
[8] Higuera, Ronald P.,Haimes, Y.Y., Software Risk Management.
(CMU/SEI-96-TR-012) .Software Engineering Institute, Carnegie Mellon
University, Pittsburgh, Pa., 1996.
[9] Dipak Surie. Evaluation and Integration of risk management in CMMI
and ISO/IEC 15504(J). http://www.cs.umu.se/~dipak/paper-cmmi.pdf.
[10] I Ben-David, T Raz. Economic optimization of project risk management
efforts(J).Project Risk Management Optimization,2002.
[11] Xu Ru-zhi, Qian Le-qiu. CMM-based software risk control
optimization(A).Proceeding of the 2003 IEEE International Conference
on Information Reuse and Integration(IRI-2003)(C).Las
Vegas,2003.499-503.