| 
Process Implementation 
 
 
The purpose of this step is to understand the critical risks the organization faces when developing and maintaining software.  For example, a critical risk for an organization that develops software for tax returns might be the risk that the software will not be available for tax season.  A vendor of medical equipment will likely be more concerned with delivering a defect free system than with meeting an aggressive target date.  The critical risks should be those risks which can negatively impact the Critical Metrics Set.  If they are not, then the Critical Metrics Set, or the critical risks should be reexamined. 
 
There are a wealth of techniques that can reduce risk.  Which ones can do the best job depends on what the risks are.  Moreover as the business changes and as technology changes, the risks will also change.  Some of the factors that will influence the risk profile include: 
 
 Regulated business vs. highly competitive 
 
 Development vs. maintenance 
 
 Many users vs. few users 
 
 Stable mature technology vs. new technology 
 
 Centralized system vs. distributed system 
 
 Technical platform 
 
 Large integrated system vs. small stand-alone system 
 
 Tight target dates 
 
 Limited budget 
 
 Rapidly changing business environment 
 
 Life critical product 
 
The risk profile should heavily influence the priorities in the Defect Management Plan. |