what we have yet to learn about software risk management
Shari Lawrence Pfleeger · 2000
This paper examines the way in which computer scientists perform risk management, and compares it with risk management in other fields. We find that there are three major problems with risk management: false precision, bad science, and the confusion of facts with values. All of these problems can lead to bad decisions, all in the guise of more objective decision-making. But we can learn from these problems and improve the way we do risk management.