Formalization of risk analysis in software products for calculating the effectiveness of investment projects