1.1<\/b> Overview<\/p>\n
This document:<\/p>\n
provides risk management elaborations for the processes described in ISO\/IEC\/IEEE 15288 and ISO\/IEC\/IEEE 12207,<\/p>\n<\/li>\n
provides the users of ISO\/IEC\/IEEE 15288, ISO\/IEC\/IEEE 12207 and their associated elaboration standards with common terminology and specialized guidance for performing risk management within the context of systems and software engineering projects,<\/p>\n<\/li>\n
specifies the required information items that are to be produced through the implementation of risk management process for claiming conformance, and<\/p>\n<\/li>\n
specifies the required contents of the information items.<\/p>\n<\/li>\n<\/ul>\n
This document provides a universally applicable standard for practitioners responsible for managing risks associated with systems and software over their life cycle. This document is suitable for the management of all risks encountered in any organization or project appropriate to the systems or software projects regardless of context, type of industry, technologies utilized, or organizational structures involved.<\/p>\n
This document does not provide detailed information about risk management practices, techniques, or tools which are widely available in other publications. Instead this document focuses on providing a comprehensive reference for integrating the large and wide variety of processes, practices, techniques, and tools encountered in systems and software engineering projects and other lifecycle activities into a unified approach for risk management, with the purpose of providing effective and efficient risk management while meeting the expectations and requirements of organization and project stakeholders.<\/p>\n
1.2<\/b> Purpose<\/p>\n
This document provides information on how to design, develop, implement, and continually improve risk management in a systems and software engineering project throughout its life cycle.<\/p>\n
1.3<\/b> Field of application<\/p>\n
This document is compatible with risk management as described in ISO\/IEC\/IEEE 15288 and ISO\/IEC\/IEEE 12207 and can also be applied in conjunction with ISO 31000. Depending on the scope and context of the systems or software engineering project of interest, there are a number of additional International Standards that can be applicable to the risk management effort including ISO 9001. This document is intended to provide additional information useful in implementing a system for integrated risk management for systems and software engineering projects. 5.2 discusses in more detail how this document can be applied with other standards.<\/p>\n
This document is applicable to:<\/p>\n
project teams which use ISO\/IEC\/IEEE 15288 and ISO\/IEC\/IEEE 12207 on projects dealing with man-made systems, software-intensive systems, software and hardware products, and services related to those systems and products, regardless of organization or project scope, product(s), methodology, size, or complexity;<\/p>\n<\/li>\n
project teams performing risk management activities to aid in ensuring that their application of risk management conforms to ISO\/IEC\/IEEE 15288 and\/or ISO\/IEC\/IEEE 12207;<\/p>\n<\/li>\n
project teams using ISO\/IEC\/IEEE 15289 on projects dealing with human-made systems, software-intensive systems, software and hardware products, and services related to those systems and products, regardless of organization or project scope, product(s), methodology, size, or complexity; and<\/p>\n<\/li>\n
project teams generating information items developed during the application of risk management processes to conform to ISO\/IEC\/IEEE 15289.<\/p>\n<\/li>\n<\/ul>\n
This document can be applied in conjunction with ISO 31000 and IEC 31010 to augment risk management performed within the context of ISO\/IEC\/IEEE 15288 and\/or ISO\/IEC\/IEEE 12207.<\/p>\n
| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 2<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
| 7<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
| 9<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
| 11<\/td>\n | 1 Scope 1.1 Overview 1.2 Purpose 1.3 Field of application <\/td>\n<\/tr>\n | ||||||
| 12<\/td>\n | 2 Normative references 3 Terms and definitions <\/td>\n<\/tr>\n | ||||||
| 15<\/td>\n | 4 Conformance 4.1 Intended usage 4.2 Conformance to information items 4.3 Conformance to process 4.4 Full conformance 5 Key concepts and application 5.1 Key concepts 5.1.1 Risk and opportunity 5.1.2 Project and organizational specific terminology <\/td>\n<\/tr>\n | ||||||
| 16<\/td>\n | 5.1.3 Systems and software 5.1.4 Uncertainty and its relationship to risk 5.1.5 Complexity and its relationship to risk 5.1.6 Risk management above the project level 5.1.7 Purpose and principles for risk management <\/td>\n<\/tr>\n | ||||||
| 17<\/td>\n | 5.2 Application 5.2.1 General <\/td>\n<\/tr>\n | ||||||
| 18<\/td>\n | 5.2.2 Application with ISO\/IEC\/IEEE 15288 or ISO\/IEC\/IEEE 12207 5.2.3 Application with ISO 31000 5.2.4 Application with ISO 9001 <\/td>\n<\/tr>\n | ||||||
| 19<\/td>\n | 5.2.5 Application with other ISO, IEC, ISO\/IEC, and ISO\/IEC\/IEEE standards 6 Risk management process 6.1 Purpose 6.2 Process <\/td>\n<\/tr>\n | ||||||
| 21<\/td>\n | 6.3 Outcomes 6.4 Activities and tasks 6.4.1 General 6.4.2 Plan risk management <\/td>\n<\/tr>\n | ||||||
| 22<\/td>\n | 6.4.3 Manage the risk profile <\/td>\n<\/tr>\n | ||||||
| 23<\/td>\n | 6.4.4 Analyze risks <\/td>\n<\/tr>\n | ||||||
| 26<\/td>\n | 6.4.5 Treat risks <\/td>\n<\/tr>\n | ||||||
| 28<\/td>\n | 6.4.6 Monitor risks 6.4.7 Evaluate the risk management process <\/td>\n<\/tr>\n | ||||||
| 29<\/td>\n | 7 Risk management in life cycle processes 7.1 Overview 7.2 Risk management in agreement processes 7.2.1 General 7.2.2 Acquisition process <\/td>\n<\/tr>\n | ||||||
| 30<\/td>\n | 7.2.3 Supply Process <\/td>\n<\/tr>\n | ||||||
| 31<\/td>\n | 7.3 Risk management in organizational project-enabling processes 7.3.1 General <\/td>\n<\/tr>\n | ||||||
| 32<\/td>\n | 7.3.2 Life cycle model management process 7.3.3 Infrastructure management process <\/td>\n<\/tr>\n | ||||||
| 33<\/td>\n | 7.3.4 Portfolio management process 7.3.5 Human resource management process <\/td>\n<\/tr>\n | ||||||
| 34<\/td>\n | 7.3.6 Quality management process 7.3.7 Knowledge management process <\/td>\n<\/tr>\n | ||||||
| 35<\/td>\n | 7.4 Risk management in technical management processes 7.4.1 General 7.4.2 Project planning process <\/td>\n<\/tr>\n | ||||||
| 36<\/td>\n | 7.4.3 Project assessment and control process <\/td>\n<\/tr>\n | ||||||
| 37<\/td>\n | 7.4.4 Decision management process 7.4.5 Risk management process <\/td>\n<\/tr>\n | ||||||
| 38<\/td>\n | 7.4.6 Configuration management process <\/td>\n<\/tr>\n | ||||||
| 39<\/td>\n | 7.4.7 Information management process <\/td>\n<\/tr>\n | ||||||
| 40<\/td>\n | 7.4.8 Measurement process 7.4.9 Quality assurance process <\/td>\n<\/tr>\n | ||||||
| 41<\/td>\n | 7.5 Risk management in technical processes 7.5.1 General 7.5.2 Business or mission analysis process <\/td>\n<\/tr>\n | ||||||
| 42<\/td>\n | 7.5.3 Stakeholder needs and requirements definition process <\/td>\n<\/tr>\n | ||||||
| 43<\/td>\n | 7.5.4 System\/Software requirements definition process <\/td>\n<\/tr>\n | ||||||
| 44<\/td>\n | 7.5.5 Architecture definition process <\/td>\n<\/tr>\n | ||||||
| 45<\/td>\n | 7.5.6 Design definition process 7.5.7 System analysis process <\/td>\n<\/tr>\n | ||||||
| 46<\/td>\n | 7.5.8 Implementation process <\/td>\n<\/tr>\n | ||||||
| 47<\/td>\n | 7.5.9 Integration process 7.5.10 Verification process <\/td>\n<\/tr>\n | ||||||
| 48<\/td>\n | 7.5.11 Transition process <\/td>\n<\/tr>\n | ||||||
| 49<\/td>\n | 7.5.12 Validation process 7.5.13 Operation process <\/td>\n<\/tr>\n | ||||||
| 50<\/td>\n | 7.5.14 Maintenance process <\/td>\n<\/tr>\n | ||||||
| 51<\/td>\n | 7.5.15 Disposal process 7.6 Tailoring process 7.6.1 Typical risk areas <\/td>\n<\/tr>\n | ||||||
| 52<\/td>\n | 7.6.2 Typical opportunity areas 7.6.3 Typical treatments 8 Information items 8.1 Risk management plan 8.1.1 Purpose 8.1.2 Risk management plan outline <\/td>\n<\/tr>\n | ||||||
| 54<\/td>\n | 8.2 Risk treatment plan 8.2.1 Purpose 8.2.2 Risk treatment plan outline <\/td>\n<\/tr>\n | ||||||
| 56<\/td>\n | Bibliography <\/td>\n<\/tr>\n | ||||||
| 58<\/td>\n | IEEE Notices and Abstract <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Systems and software engineering. Life cycle processes. Risk management<\/b><\/p>\n |