CRM-Based Software Project Risk Management Framework And Its Application

With the rapid development of information technology, software, as a growing forceis applied in all kinds of fields. People’s increasing demand of software, software projectis turning into a large-scale engineering and systematic project. The complexity,uncertainty and technical difficulty in all the development phases are getting higher andhigher. Meanwhile, the project risks are increasing continuously, which makes thesoftware risk management even important. The current failure rate of softwaredevelopment is still high, which is largely because the software development companiesand teams lack of effective risk management mechanism and implementation, can notcorrectly identify potential risks and take effective preventive and mitigation measures,leading to the delay, over budget or underperformance of the software and the ultimatefailure. In order to improve the success rate of software projects, the software industryshould bring in effective risk management practice to improve risk prediction capabilitiesand to implement mitigation measures.Deep research has been carried out in domestic and foreign software industry withthe introduction of several classic software project risk management models. Although, thetheoretical knowledge of software risk management is developing to maturity, preventablefailures continue to occur at an alarming rate. One major reason contributes to theoccurrence of these failures is that organizations fail to implement these risk managementpractices in real projects. A Continuous Risk Management based software riskmanagement framework, which specifies accepted best practice for the discipline of riskmanagement has been introduced to solve this problem in a time manner.The framework defines key risk management activities. In particular, the frameworkhelps provide a foundation for a comprehensive risk management methodology basis forevaluating and improving a program’s risk management practice. The Risk ManagementFramework can be applied in all phases of the system development life cycle (e.g.,acquisition, development, operations). In addition, the framework can be used to guide themanagement of many different types of risk. This framework defines the main activitysequence of implementing risk management. The three core risk management activities are assessing risk, planning for risk mitigation, and mitigating risk. In order to verify theeffectiveness and operability of this risk management framework, the framework isimplemented to a real college credit bank system. During the verifying process, theframework conducts three phases of activities, which are preparing for risk management,performing risk management activities, and sustaining and improving risk management.The result shows that this framework goes well with this system that all the critical risksare controlled under tolerance, and the project is completed under schedule and cost withexcellent performance.