A Framework for Software Product Risk Management Based On Quality Attributes and Operational Life Cycle (SPRMQ)
Halima M. Mofleh, Ammar Thabit Zahary · 2011
This paper presents our framework that tries to improve software product risk management by applying some sequential processes during operational life cycle of the product. The framework is called SPRMQ (a framework for Software Product Risk Management based on Quality attributes and operational life cycle) which attempts to manage software product risk. SPRMQ consists of four processes used to manage risk of software product: identifying risk factors, analyzing risk probabilities and its effects on product quality, risk mitigation, and risk monitoring. SPRMQ uses brainstorming to identify risk factors and probability/impact approach with some modifications to analyze risk based on quality attributes: Functionality, Reliability, Performance, Efficiency, and Maintainability. To mitigate risk, SPRMQ uses three strategies: avoidance, minimization, and contingency. If risk cannot be acceptable SPRMQ framework uses avoidance strategy. If risk can be acceptable and can be reduced, SPRMQ uses minimization strategy, but if risk cannot be reduced, SPRMQ uses contingency strategy. SPRMQ framework is applied to Admission and Registration System (ARS) of University of Science and Technology (UST). Testing results show that using SPRMQ, project/risk manager can effectively manage a software product by measuring the impact of risks that may happen in three risk levels: high, medium, or low.