Monday

Risk Management

Risk - Definition
Risk is the possibility of the negative or undesirable outcome.
A risk is something that has not happened yet and it may never happen; it is a potential problem.
Not all projects are subject to the same risks.
Test items can also have risks associated with them.

Importance
We are concerned about risks because, if one of them did happen, we’d feel a negative impact.Not all software systems carry the same level of risk and not all problems have same impact when they occur.

Risk Levels:
Level of Risk has three components to it
-Potential Consequences:Impact
-Likelihood of Occurrence: Probability
*More likely the outcome is, the worse the risk
*In Future: Between 0% and 100% (possibility)
*In Past: Either 0% or 100%
-Detection Capability
*How well we can identify the risk?
-Every testing effort has risks associated with it.
*Testing software with a high degree of criticality, complexity, or a tight delivery deadline all impose risks that may have negative impacts on project goals.

Risks - Classification:
We can classify risks into
*Project Risk
*Product Risk

*Project Risk:
-factors relating to the way work is carried out

*Product Risk:
-factors relating to what is produced by work.

*Product risk might influence project risk.

Risks - Options
For any risk, we have four typical options:

-Mitigate: Take steps in advance to reduce the likelihood (possibly the impact) of the risk.

-Contingency: Have a plan in place to reduce the impact should the risk become an outcome.

-Transfer: Convince the member of the team or project stakeholder to reduce the likelihood or accept the impact of the risk.

-Ignore: Do nothing about the risk when there is little that can be done or when the likelihood and impact are low.

Risk Management - Steps

*Identify risks related to testing
Project Plan, Requirements, Design & Implementation Phases
Risk Repository

*Prioritize and assess the risks
Use Six Sigma Prioritization Tool : FMEA

*Identify mitigation / contingency / transfer plan

*Monitor & Track risks throughout using Risk Register.
-Use GCRAILS document