Evaluation and Integration of Risk Management in CMMI and ISO/IEC 15504
Dipak Surie · 2004
Abstract. During software development, software companies are exposed to risks (unwanted events) which lead to economic and competitive loss. Risk management technique can be used to minimise the loss in software projects. Some software process improvement models include risk management among their guidelines. The goal of this paper is to evaluate and analyse how risk management is handled by Capability Maturity Model Integration (CMMI) and International Organization for Standardization/International Electrotechnical Commision (ISO/IEC) 15504. A risk management framework is used in this evaluation study. The results of this study show that risk management in CMMI is more comprehensive than ISO/IEC 15504, but both models handle risk factors to appreciable extent. 1