Exam II Flashcards
(115 cards)
What is Risk?
It is an uncertain event or condition that, if it occurs, has a positive or negative effect on one or more product / project objectives.
Define Issue
It is an event or situation that has happened and has a negative effect on one or more project objectives. Therefore, specific actions or work-arounds are needed to address the issue and ensure that the project stays on track.
Risk = Threat * Vulnerability … what does this mean? How this might it work?
It is potential for loss, damage, or destruction of an asset as a result of a threat exploiting a vulnerability. We conduct a Risk Assessment which then goes to determine the Actions to Reduce Risk. Then we revise to determine which risks have the most impact before making the changes to reduce risk.
What is Negative Risk?
Are risks that negatively impact the project which we try to reduce or eliminate.
What is Positive Risk?
Is any condition, event, occurrence, or situation that provides a possible positive impact for a project or enterprise that we exploit to maximize project outcomes.
What is the difference between Positive and Negative Risk
Positive risks is where we try to exploit to maximize project outcomes while Negative risks are risks that are potentially threat to the project which we try to reduce or eliminate.
Common Types of Software Risk: Give a (brief) description of each type and other sources of risk
‒ Lack of top-management commitment to the project
‒ Failure to gain user commitment
‒ Misunderstanding the requirements
‒ Lack of adequate user involvement
‒ Failure to manage end-user expectations
‒ Changing scope/objectives (… related to misunderstanding the requirements)
‒ Lack of required knowledge/skills in the project personnel
‒ Lack of frozen requirements (i.e., scope creep or feature creep)
‒ Introduction of new technology (that may not yet be well understood)
‒ Insufficient / inappropriate technology
‒ Conflict between departments (e.g., users & developers)
New Technology and its impact on risk and effects on project risk and corporate risk?
New technology can increase risk
New Technologies + (Inadequate) Resource Base -> Increased Project Risk
-> Increased Corporate Risk
For example …
− Developing new business ideas
− Starbucks crowd-sourced: MyStarbucksIdea
− May need to build and manage various new technologies for which they do not currently have the skills or technology infrastructure
The 7 Components of Project Risk Management
‒ Plan Risk Management ‒ Identify Risks ‒ Perform Qualitative Risk Analysis ‒ Perform Quantitative Risk Analysis ‒ Plan Risk Responses ‒ Implement Risk Responses ‒ Monitor Risks
Space Shuttle Challenger: What happened and what went wrong?
The Challenger exploded 73 seconds after launch killing all of its occupants. The cause of the disaster that two redundant O-ring seals in a joint in the Space Shuttle’s right solid rocket booster (SRB) failed in record-low temperatures of the launch reduced the elasticity of the rubber O-rings, reducing their ability to seal the joints. Investigation reveal organizational culture at NASA contributed to the accident as they knew for nine years before the disaster.
Space Shuttle Columbia, What happened and what went wrong?
The shuttle disintegrated during reentry less than 10 minutes from landing in Florida killing all of its occupants. NASA decision makers “failed to recognize the relevance of engineering concerns for safety as a piece of the insulative foam broke off from the Space Shuttle external tank and struck the thermal protection system tiles on the orbiter’s left wing causing the shuttle to disintegrate returning to Earth.
International Space Station, what happened and what went wrong?
Ever since being launched to deal with several maintenance issues, unexpected problems and failures. These incidents have affected the assembly timeline, led to periods of reduced capabilities of the station and in some cases could have forced the crew to abandon the space station for safety reasons, had these problems not been resolved. The biggest problem are Micrometer strikes and debris up to 1 cm could cause critical damage while anything larger than 10 cm could “shatter a satellite or spacecraft into pieces.
What is the Cone of Uncertainty? What does it represent and How does it work?
It is a progressively more detailed and accurate projection of the project schedule and duration as the project manager or project team specifies project deliverables and activities in more detail. At the beginning of a project, comparatively little is known about the product or work results, and so estimates are subject to large uncertainty. As more research and development is done, more information is learned about the project, and the uncertainty then tends to decrease, reaching 0% when all residual risk has been terminated or transferred. This usually happens by the end of the project i.e. by transferring the responsibilities to a separate maintenance group. It goes from feasibility, concept operation, requirements specifications, product design, detail specifications, and accepted software
What is Risk Assessment? Why is risk so difficult to determine/assess?
It is document that identifies potential risks, an evaluation of the likelihood of the risk event occurring, and its impact on the project. Risk is an important activity that is often not done particularly well! It is difficult, often complex, and subtle.
Managing Risk – features/phases/tasks? What’s done in each phase?
Same ideas in Plan Risk Management ‒ Identify Risks ‒ Perform Qualitative Risk Analysis ‒ Perform Quantitative Risk Analysis ‒ Plan Risk Responses ‒ Implement Risk Responses ‒ Monitor Risks
Risk Management Process – steps/phases? What’s done in each phase?
- Plan Risk Management ‒ Identify Risks ‒ Perform Qualitative Risk Analysis ‒ Perform Quantitative Risk Analysis ‒ Plan Risk Responses ‒ Implement Risk Responses ‒ Monitor Risks
Monitor Risks – Why? How? By doing what …?
Consistent w/ the process of project management control, identified risks must be monitored for change and must be controlled. ‒ Implement Risk Responses ‒ Perform … • Periodic Project Risk Reviews • Project Risk Response Audits • Technical Performance Analysis • Metrics … plan and collect data • And look for risks that exist that were not specifically identified
Reducing Risk
Reducing the risk could be publicized (i.e., make sure everyone is aware of potential risks), avoided, or even eliminated by dealing w/ root cause(s).
Revised Risk
Is where the best managers often prioritize risks according to magnitude and importance
Risk Response Strategies
Six different strategies: Risk escalation, avoidance, exploitation, transference, mitigation, and acceptance
What is risk escalation?
Is moving the response to a higher level in the organization
What is avoidance?
Actively seek to avoid identified threats to the project, eliminate the risk, or not become involved.
What is exploitation?
It is take advantage of opportunities for positive outcomes.
What is transference?
Also known as Risk Sharing, it is the transfer the risk to another party, often through contracts or insurance.