Insight into Risk Management in Five Software Organizations

Many software development and evolution projects use risk management process for tackling various uncertainties, unexpected events and unclear project prerequisites. Despite this, little is known about their effectiveness. In this paper, we report on the status of risk management practice within five organizations. The report encompasses issues such as (1) industrial understanding of risk, (2) project uncertainty, (3) risk management within projects, and (4) use of risk management process.