This paper discusses the background and results of a research project which was conducted by ENISA (European Network and Information Security Agency) in cooperation with the BOC Information Technologies Consulting GmbH. The project was initiated with respect to the main task of ENISA: ensuring a high and effective level of network and information security within organisations in the European Un...

This paper briefly summarizes the ERMS project and presents the developed model by showing results from environmental fates and risk calculations of a discharge from offshore drilling operations. The developed model calculates environmental risks for the water column and sediments resulting from exposure to toxic stressors (e.g., chemicals) and nontoxic stressors (e.g., suspended particles, sed...

It is possible to build useful models for software project risk assessment based on Bayesian networks. A number of such models have been published and used and they provide valuable predictions for decision-makers. However, the accuracy of the published models is limited due to the fact that they are based on crudely discretised numeric nodes. In traditional Bayesian network tools such discreti...

Limiting the focus of risk analysis to quantifiable factors and using a narrow understanding of the scope of a software project are major contributors to significant software failures. A Software Development Impact Statement (SoDIS) process is presented which extends the concept of software risk in three ways; --it moves beyond the limited approach of schedule, budget, and function, --it adds q...

The ability to evaluate project proposals, assessing future success, and organizational value is critical to overall business performance for most enterprises. Yet, predicting project success is difficult and often unreliable. A four-year field study shows that the effectiveness of available methods for evaluating and selecting large, complex project depends on the specific project type, org...

Like any other business, software development organizations try to maximize their profits and minimize their risks. Such risks represent the uncertain events and conditions that may prevent enterprises from reaching their goals. This possibility has turned risk management into a major concern, not only for project managers but also for executive officers involved with strategic objectives. In t...

The ability to reliably predict the risk for a software project presents a significant advantage for a development team. It provides an opportunity to address high risk components earlier in the development life cycle, when their impact is minimized. This article proposes a Bayesian Belief Networks (BBNs) model that captures the evolution of the quality of a software product and provides reliab...

Risk management aims to discuss the probabilities and consequences of risks on the goals of a software project. In such projects, there are dependence relationships between risks, although they are not treated yet by standard risk management practices. This paper is concerned with the analysis of risk dependencies, where these risks are assessed when multiple project stakeholders are involved i...

This paper enhances the currently available formal risk management models and related frameworks by providing an independent mechanism for checking out their results. It provides a way to compare the historical data on the risks identified by similar projects to the risk found by each framework Based on direct queries to stakeholders, existing approaches provide a mechanism for estimating the p...

Projects are dealing with bigger stakes and facing an ever-growing complexity. Project risks have then increased in number and criticality. Lists of identified project risks thus need to be decomposed, for smaller clusters are more manageable. Existing techniques are mainly based on a well-known parameter such as the nature of the risk or its criticality. But some limits have appeared since pro...