IEEE DRAFT 1540 : D10.0 2000

1 Overview
      1.1 Scope
      1.2 Purpose
      1.3 Field of Application
             1.3.1 Application with IEEE/EIA 12207 Series
             1.3.2 Application Independently of
                      IEEE/EIA Series
      1.4 Conformance
      1.5 Disclaimer
2 References
3 Definitions
      3.1 Acceptability
      3.2 Consequences
      3.3 Likelihood
      3.4 Project risk profile
      3.5 Risk
      3.6 Risk action request
      3.7 Risk category
      3.8 Risk exposure
      3.9 Risk management plan
      3.10 Risk management process
      3.11 Risk profile
      3.12 Risk state
      3.13 Risk Treatment
      3.14 Risk threshold
      3.15 Stakeholder
4 Application of this Standard
5 Risk Management in the Software Life
      5.1 Risk Management Process
             5.1.1 Plan and Implement Risk Management
             5.1.2 Manage the Project Risk Profile
             5.1.3 Perform Risk Analysis
             5.1.4 Perform Risk Treatment
             5.1.5 Perform Risk Monitoring
             5.1.6 Evaluate the Risk Management Process
6 Annex A [Informative] Risk Management Plan
      6.1 Purpose
      6.2 Risk Management Plan
7 Annex B [Informative] Risk Action Request
      7.1 Purpose
      7.2 Risk Action Request
8 Annex C [Informative] Risk Treatment Plan
      8.1 Purpose
      8.2 Risk Treatment Plan
9 Annex D [Informative] Application of Risk Management
      in the IEEE/EIA 12207 Series
      9.1 General
      9.2 Acquisition Process
      9.3 Supply Process
      9.4 Development Process
      9.5 Operation process
      9.6 Verification process
      9.7 Joint Review Process
      9.8 Problem Resolution process
      9.9 Management Process
      9.10 Tailoring Process
      9.11 Miscellaneous
10 Annex E [Informative] Annotated Bibliography

Gives a process for software risk management during software acquisition, development, supply, operations and maintenance. Both technical and managerial personnel throughout an organization should apply this standard. The use of this standard presumes the use of IEEE/EIA 12207.0. The risk management process is applied in addition to the processes defined in `12207.0.