Risk Management in Software Development

(Sigh) Another essay, yet more research...
This time, I'm looking into how risk management is done in the software industry. I'm basing my answer fairly heavily around the SEI risk management model, but as always I'm interested in any thoughts that this forum's Programmers and Software Engineers might have on the subject.
Does your company actually have a strategy for controlling risk? Does it work? I could read theory until my eyes water, but I'd quite like to know about risk management practices that are effective, from both the agile (c.f. XP) development viewpoint to those that work through the classic 'waterfall' model.
If you've a spare minute to add your comment, your time would be very much appreciated.
Cheers/

Correction for a duff link: This was the SEI link: http://www.sei.cmu.edu/programs/sepm/risk/

Similar Messages

Software Configuration Management for ABAP Development ?

Hi,
we are a software company selling a Data Capture Solution.
For this, we are currently in the process to develop an interface for transferring the extracted data into a customer's SAP R/3 system.
Since we want to develop this interface following certain software engineering principles, we are looking for a way to solve certain simple common Software Configuration Management issues, such as:
- Object Versioning (Similar to file versioning in classic software development): That means being able to:
-- Keep track WHO changed WHAT WHEN and WHY?
-- Revert to a former version of an object (e.g. when the fix of a former defect must be revoked for some reason)
-- Keep track which changes have been made for a certain Change Request (NOT meaning SAP Change Requests, but Change Request for our interface development)
- Label a certain version state as 'released' or 'tested' or whatever
- Perform a kind of 'Branching' (Classical Software Configuration Management task), e.g. when we release a version of our interface and start the development of a new version, we must open a 'Maintenance Branch' of our released version parallel to the ongoing development of the future release.
When I say 'Objects', I mean everything being concerned when developing something within R/3; that can be ABAP programs, forms, tables (structure and content(!)), etc.
We are using an SAP System version ECC 5.0 for development; as for now, we have come to the conclusion to use the versioning that comes with the Transforms, although they do not really cover the above requirements as we would like to.
Is there anybody out there who had the same idea and solved it somehow?
My impression is that in the SAP world, classical Software Configuration Management is not a part of the way of thinking; and that development for SAP R/3 has little in common with classical software development.
But maybe there is an add-on or some hidden features of NetWeaver or anything that can solve these issues.
Hope is the last to die...
Thank you very much for any feedback,
Regards,
Jörg

Thank you very much for your answers!
@Pushkar:
No this is not exactly what I meant;
What we want to do is a kind of classical configuration management or at least version control of
development objects like ABAP programs, table definitions, table data etc. that are contained within our SAP development system.
It's not about version management of external documents imported into SAP.
I know that there is a kind of version control via Transports, but this does not cover all classical version control mechanisms; what we are missing there is
- the possibility of reverting to an older version of an 'object'
- Branching / Merging mechanisms
- the possibility to choose which changes I want to release with which transform and which objects
- view differences between arbitrary versions of an object
I was hoping there is maybe a kind of 'add-on' or maybe even a built-in tool that provides classical version control mechanisms or something similar.
Thank you for further help,
Regards,
Jörg

Software Development Management- How?

Hi There,
Does anyone know of a good way to manage software development (in
Labview)?
I've been the only programmer in Labview at my company, so tracking
software changes wasn't too bad. We recently hired a couple of
engineers who also program Labview. Now we're at a point where there
are many versions of the same software springing up. No one here has
any knowledge of software management tools available (except a
spreadsheet program, and a magnetic marker board).
Any links or suggestions are welcomed.
Kind Regards,
-Dorian
dorianjps_at_hotmail.com (change _at_ to @ if e-mailing me)

Dorian Grey wrote:
>
> Hi There,
>
> Does anyone know of a good way to manage software development (in
> Labview)?
>
> I've been the only programmer in Labview at my company, so tracking
> software changes wasn't too bad. We recently hired a couple of
> engineers who also program Labview. Now we're at a point where there
> are many versions of the same software springing up. No one here has
> any knowledge of software management tools available (except a
> spreadsheet program, and a magnetic marker board).
A critical part of any source code management is the human level:
deciding which developer will touch what VIs! Then you choose a tool.
We use MS Visual SourceSafe and it works OK for 2 developers.
I've used it on my own for 3 years.
Availabl
e standalone or as part of Visual Studio.
I also know people at a systems integrator (NI Alliance member) who use
it. They still use it for control of up to 20 developers' work.
See its home page http://msdn.microsoft.com/ssafe/ and the best
practices page
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnvss/html/vssbest.asp
Best, Mark

What is (sdlc) software developement life cycle management in hyperion esssbase and planning ?

what is (sdlc) software developement life cycle management in hyperion esssbase and planning ?

SDLC is a high-level concept (https://en.wikipedia.org/wiki/Systems_development_life_cycle) not a feature of a particular software package, so I'm really not sure what you're asking.
If you're asking about the somewhat related topic of moving changes through environments, look at About Lifecycle Management.

Software Developer w/ LabView experience

Senior Software Developer – We are a rapidly growing company focused on the development of cutting edge sensors and software. Our system integrations group is looking for a senior developer to provide technical leadership in the development and integration of our business intelligence software.
We require an experienced consultant to analyze technical data, designs, and review preliminary specifications. This also includes the writing of technical specifications for computer systems, networking, software, applications, develop/maintain databases and confer with work colleagues to design systems. Proven experience with Visual Studio and other application and web development tools required.
Applicants must be adept in principles and theories of computer science, evaluate computer system user requirements, apply project management techniques, conduct performance testing, consult with customers concerning needs, design tables depicting data, read technical drawings, and evaluate computer system user request. Candidates must possess a Bachelor of Science Degree or related.
Please e-mail [email protected]

Hi,
I am interested in this job profile. I am from India, but can relocate to MI. May I know if I could apply for this job?

Need help in Point-of-Sales software developing guide

i was required to developed a new Point-of-Sales software for my new company. however, i do not know where to start. i'm new to POS software, so if anyone who has experience in Point-of-sales software development, plz drop a hint or two for me.
i guess the biggest problem for me is to detecting and communicating with the Barcode Scanner, Receipt printer, Cash Drawer and Pole Display. i would appreciate for the advise on how to achieve this.
tks

well, the things is like this:
the existing system is actually maintain by the ex-staff of the company. however, due to some unknown circumstances, all of them left within a very short period of time. and now, we were hired.
the whole things a mess. bugs everywhere. so the only solution the management would accept is to re-develop the whole POS and Inventory system. but non of us have any experience in developing such system and we don't have any documentation for the existing system. Now the management would like to see a prototype, a simple POS system that can perform simple operation - scan barcode, display the price at the pole display, 'kick-out' the cash drawer and print the receipt.
i have done a bit part of research, download some Java-based POS such as JPOS, JavaPOS, and FreeMercator. but i don't really get the idea of how to communicate with the devices. and now the management decided to change all the POS peripherals, so i can tell which brand that we are going to use.
for your question:
Do you already have an inventory control system in place? yes, but no good. no doc as well.
If so you'll want to integrate with that, which could get hairy depending on the system. What's your intended architecture? each store will have their own database. however, they will export their data to the HQ every morning before business hour. the export process of the current system is to extract the data from the database to MS Access DB, then send to the HQ through email.
May I ask why you chose Java to develop this system in?Linux + Postgre + Java = minimum development cost. the company wanted to keep cost at the minimum level.
actually, i do not worry bout the inventory system. all i care is how to communicate with the devices, because this is the first time that i deal with all these POS devices.
besides, i'm not sure if i have to pay attention to any thing like drivers, or whatever standard, etc... and it will be the most appreciate if you can show me (or links to websites) some sample of how to detect and communicating the devices.
lastly, many tks to you for your advice ;)
have a nice day
Jerry

Project Management in J2EE-Development

Hi all, unfortunatley there is no forum for project management issues, so maybe I will bother some of you with non-technical questions:
Is there any learning material e.g. books, forums, newsgroups, tutorials related to the topic of project managment in J2EE-Development? I'm particularly interessted in questions like:
- Team organisation. Function-oriented or component-oriented?
- Development Process. Is there anything like a RUP customised for J2EE-Projects? Mandatory roles and artifacts you need in any project?
- Effort estimations. Has anyone ever heard about experiences with formal estimation technics like function point analysis in J2EE-Projects?
- Risk Management. What are the typical risks in J2EE-Projects and how do you manage them?
- Quality Assurance... is very difficult in distributed computing. Are there any recomendations and tools for successfull QA?
- Reports, lessons leard and best practices of large J2EE-Projects?
Many thanks for your contribution!

ad information resources :
http://java.sun.com/j2ee/tutorial/1_3-fcs/index.html
ad books :
Enterprise Java Beans from Richard Monson-Haefel
Those should be decent entry points as far as I can say. Regarding the other things you want to know about, I guess that there is too much room in the term J2EE Project, to answer those. Mainly your choice of Application Server and other technology used will have quite an impact, and so will the choice of your development tools.
We have been developing with J2EE for more than a year now, but our tools and environments are still changing a lot. Thus sound estimation is quite tough.
With regards,
rh

A tool for analysis,design and manamement of a software development path

Hi,
I am looking for a tool helping in designing,analysing and managment of a software development process.Sth that integerates path of software development.
All the best,
Arash Kaviani.

https://wiki.archlinux.org/index.php/Un … plications

Risks and benefits with developement platforms?

Hi,
I'm wondering about the risks involved with different developement platforms such as xampp or other software like it. Previously I've been running EasyPHP and xampp as well as apache php and mysql each by them self in a windows environment restricted to the local ip range. However since the past year I've mostly used either a FreeBSD machine or my Arch Linux setup (my main computer) and I'm thinking of using xampp on this setup but I'm unsure about what potential threats it poses. Any tip on how to get a smooth and secure yet powerfull and customizable developement platform is greatly appreciated!
What are the critical risks requiring immediate action post installation?
Is there maybe another more customizable LAMP or one that's better suited for Arch?
Edit: Spelling...
Last edited by Cipherslut (2013-07-24 17:46:30)

Clustering will make ZERO difference to most standard GUI apps.
Where it will make a difference is in applications that have been specifically written to take advantage od distributed computing. For example, complex mathmatical simulations, video encoding, gene sequencing, etc. In these applications the workload can be divided into chunks and passed out to nodes in the cluster for processing. When each node completes its calculations it passes the result back to the master node and waits for the next task
This model doesn't apply to iChat (you can't IM any faster than you can type), or iTunes (ok, audio encoding might benefit, but most tracks encode pretty quickly and you might find the time it takes to transfer the raw audio data over the network outweighs the advantages).
From a developer standpoint you can distribute your compiler tasks across a grid so that each node compiles a chunk of code and the master handles the final linking, but that's about the only advantage I can think of off-hand, unless you're planning on writing a distributed app.

Lead Software Development Engineer Available Position

Lead Software Development Engineer
We seek a Lead Software Development Engineer interested in a rewarding career in a fast-paced, team environment. The purpose of this role is to develop custom National Instruments (NI) software solutions.
Essential job responsibilities include, but are not limited to the following:
Work with customers and vendors to specify, procure, and manage the design/delivery of data acquisition and data management systems
Manage vendors and sub-contractors during installation and commissioning phases of software implementation projects
Assist in the development of proposals for new business by supplying and researching cost data and technical information
Support software development for specific external client projects through planning, design, programming, implementation, and technical support
Integrate measurement systems, data logging, and analysis packages
Ability to work with mechanical, controls, and fabrication groups to design and build custom hardware and components required to support testing projects/processes
May have opportunities to assist with specifying, procuring, and managing the design/delivery of data acquisition and data management systems
Assist with the development of sales and marketing tools to promote the Software Development Group to new and existing clients
Assist with the proposing, setup, budgeting and management of ACS service offerings in the area of data acquisition and management solutions
Help provide training, mentoring, and feedback to other employees in regards to proper engineering methods and processes as necessary
Additional duties as assigned
Basic requirements include:
Bachelor’s and/or Master’s Degree in Mechanical Engineering, Electrical Engineering, or related degree
Minimum 5 years applied work experience with NI technologies, specifically LabVIEW
NI LabVIEW CLD or willingness to get certification
Full life-cycle application development and deployment experience required
Preferred experience with the following software packages: Veristand, TestStand, Inertia, Driven, DIAdem
Proven record of excellent client service, including balancing multiple internal/external projects and responding to changes in deadline, scope, and design
Preferred experience with the following hardware platforms: cRIO, cDAQ, PXI, FPGA and other NI-based hardware platforms
Experience in application automation of PLC, HMI, sensors, and instrumentation preferred
Demonstrates good technical writing and oral communication skills
Ability to travel to customer facilities (25% - 75%) nationally and overseas, travel may take place for more than a week at a time
Must have the following personal skills and characteristics: Problem solving skills, strong organizational and time management skills, team player, takes initiative to improve personal skills, strong interpersonal skills, ability to work effectively with all internal and external levels and groups
ACS is a Madison, WI, based company that provides integrated design, construction, and operations solutions for complex facilities, systems, and equipment. ACS focuses our expertise on taking a project from conception to completion with our unique streamlined turnkey delivery methods. Our core markets focus on projects relating to science and technology, engine and vehicle testing, and consumer and commercial products.
If an exciting career opportunity with a growing, entrepreneurial company appeals to you, please apply immediately. We offer an excellent salary, bonus and benefits package. For a full overview of our organization, visit our website at: http://www.acscm.com
Please apply through our website at: http://www.acscm.com/Careers/AvailablePositions.aspx
EOE/AA

dear sir,
iam indumathi, having expereience about 1.8Years i electronics field.
i am interested in this job. i have aatched my Cv , kindly consider me.
looking for your reply
with regards,
indumathi.s
Attachments:
indumathi CV.doc ‏69 KB

Risk Management Plan ERP WW Implementation

Hello All
I´m developing a Risk Management Plan and need to identify risks related to ERP implementation in multiple geographies. The implementations will be based on the same template and the template, a base model, will be managed in a centralized way by the corporation, both from a process and from an IT perspective, e.g., process changes that impact the base model will be approved by a centralized group responsible for the integrity of the base model. These changes, if approved, will be incorporated to the base model under a strict versioning and configuration management policy. The Business and IT organizations will have to manage both the integrity of the base model (and its versions) and the rollout of specific versions to the geographies. Geographies include Latin America, North America, Africa.
I´m willing to identify risks of the strategy to the business itself (the strategy I described above) and it´s impact on the IT organization/processes that will need to support it. This company already runs SAP on it´s biggest business unit, now it will be expanding the solution to smaller BUs in other countries. The base model currently used by the corporation is different than the base model (template) that will be implemented in the smaller BUs, for historical reasons.
A good start could be a Risk Assessment (part of a typical Risk Management Plan) of an ERP implementation project with similar characteristics, e.g.: multiple geographies, different Business Units in these geographies, having to ensure integrity of the base model (template), etc...
Does anyone have anything similar to this that I could use as a start? Thanks.
Message was edited by:
        José Welington Nogueira Filho

Hi Jose,
Its quite interesting that you are working on Risk management . Risk management Plan requires to analyze the organization based on its Operations,Financial activities.
As per my understnading Risk management process is involved or can be segregated based on the following classification .
a) Financial Risk
b) Operational Risk
c) Strategic Risk
d)External Risk
Your Risk management Plan cna start up with the identify, categorize and analyze enterprise risks.
a) Financial Risk:
        - Based on the complexity ,size and nature of organization identify first top
           ten financial risks in the company.
b) Operational Risks:
        - Quality
        - Hiring and retention
        - Supply Chain
        - Succession Planning
c) Strategic Risks:
        - Intellectual Property Infringement / Counterfiet
        - Business Model and portfolio
        - Resource alignment
d) Exteran Risks:
        - Catastophic/Business Interrruption
        - Technological innovation
        - Competetors
While coming to Risk management Life-Cycle:
1. Validation and verification
2. Risk Treatment process
3. Governance & Monitoring
Based on the Low and high point methods you can identify the risks and give ranks based on the risk priority and prepare a graphical presentation .
As per above risks classification i am giving you more classification it will help you to prepare your Risk management plan in detailed ananlysis:
a) Financial Risks:
       - Cash Flow
       - Credit
       - Debit
       - Equity
       - Interest rates
b) Operational Risks;
      - Catastophe /BI
      - Change Mangement
      - Security
c) Strategic risks:
      - Brand repuatation
      - Business Model Portfolio
      -Channel
      - IP Infringment/Counterfiet
      - Quality
      - Resource allocation /Alignment
d) External Risks:
       - Competeiotrs
       - Customers Needs / Product support
       - Legal / anti-trust
       - Regulatory / Taxation
       - Technological Innovations
This information will help you to start your Risk analysis Plan. Please let me know if you need any thing esle on this.
Please award points if this is helpful.
Regards,
Ramesh Choragudi

Enterprise Risk Management Approach in SAP GRC

Hi All,
Can you please let me know as to what is the approach followed for implementation of Enterprise Risk Management (ERM) in SAP GRC. Also please tell me how the internal control frameworks like COSO, COBIT is mapped to ERM in SAP GRC.
Regards
Vivek

Dear Vivek,
While assigning roles to users, you will be displayed the risks that are identified with those roles, if any. You can either mitigate or remove the roles.
The process covered by GRC Risk management includes the following steps:
-Risk Planning: Determines the approach to risk management in each business area or project. This includes setting up the risk management organization and defining risk thresholds . This phase is partially supported by a software application.
-Risk Identification and Analysis: Identifies the risks in order to analyze and prioritize them along different attributes, such as probability of occurrence and potential total loss associated to the risk.
-Risk Response: Decides on actions needed to respond to a risk. One action could be to actively mitigate the risk to reduce probability of occurrence and/or potential impact.
-Risk Monitoring: Includes the regular update of risk information and the risk reporting to monitor progress along the risk management process.
The Risk Management application provides a set of different reporting capabilities based on the individual needs of the target groups:
-A set of built-in reports that are delivered with the application. These reports allow risk managers to review the current risk state.
-Visual Composer based dashboards that provide information about the current risk status on an aggregated basis. The dashboards fulfill the risk reporting needs of senior managers and line managers.
Step 1: You maintain the Risk structure
1. You set up the organizational hierarchy
2. You set up the Activity Hierarchy
3. You set up the Risk Hierarchy
Step 2: You perform the Risk Assessment
1. You identify the risks
2. You analyze the risks
3. You respond to risks
4. You document the Incidents
Step 3: You analyze risk reports
1. You generate risk reports
2. You report the incidents
Step 4: You analyze the dashboards
Refer SAP documentation on GRC for more information.
Regards,
Naveen.

BP for Software Development Company

Hi Friends,
One Software Development Company want to implement SAP for their business. What is the business study for that company and what are the modules involved in implementing SAP and risk factors involved and what are the merits in implementing ERP. Can you help me.
NAGARAJU

Dear Nagaraju,
Best Practices Guide for Hitech Industry:
http://help.sap.com/content/bestpractices/industry/bestp_industry_ht.htm
Modules Involved:
Depends on the client and their business process.
Information about SAP Implementation:
http://en.wikipedia.org/wiki/SAP_Implementation
Blue Print:
Business blue print is a WORD doccument,In that we clearly mention our company code,sales organzation... All enterprise structure and all the order types we are using,delivery types,Partner functions..... Like that all the topics covered for the particular company,IT IS NOT MANDATORY that all the topics in SAP SD are mentioned,It depends on the client requirement,we map their business process and we cover all the things in final blueprint.
Business Blue Print is the present Bussiness functional & technical scenario and how you are going to map it in SAP with enhancements .You can use ASAP methodology for making this document.
http://www.sap.com/services/servsuptech/bestpractices/index.epx --- look for blueprint
Visit the following threads:
Re: business blue print
Business Blue Print
Marketing Business Blue Print
/message/3156958#3156958 [original link is broken]
Re: Business Blue print
Hope this will help.
Regards,
Naveen.

Two questions about Risk Management 2.0

hi experts,
Please find below two questions about Risk Management:
-In SPRO, Risk Management>Create top node: after completing information and executing I have this error:
Error in the ABAP Application Program
The current ABAP program "/ORM/ORM_CREATE_TOP_NODES" had to be terminated
because it has
come across a statement that unfortunately cannot be executed.
The following syntax error occurred in program "/ORM/SAPLORM_API_SERVICES " in
include "/ORM/LORM_API_SERVICESU10 " in
line 97:
"Bei PERFORM bzw. CALL FUNCTION "GET_ORGUNIT_THRESHOLDS" ist der Aktual"
"parameter "I_ORGUNIT_ID" zum Formalparameter "IV_ORGUNIT_ID" inkompati"
"bel."
The include has been created and last changed by:
Created by: "SAP "
Last changed by: "SAP "
Error in the ABAP Application Program
The current ABAP program "/ORM/ORM_CREATE_TOP_NODES" had to be terminated
because it has
come across a statement that unfortunately cannot be executed.
Do you know where it could come from?
-On the Portal>Risk Management
when I click in a link under the risk management menu(activities and risks, risk report, document risk,...) i alway have an internal server error:
While processing the current request, an exception occured which could not be handled by the application or the framework.
If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
Do we have to set up some customizing points before accessing these links?
Thank you !
Regards,
Julien

Hi Julien ,
I have the same error what u described as :-
-On the Portal>Risk Management
when I click in a link under the risk management menu(activities and risks, risk report, document risk,...) i alway have an internal server error:
While processing the current request, an exception occured which could not be handled by the application or the framework.
If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
Do we have to set up some customizing points before accessing these links? "
Are you able to solve this. Please let me know how to resolve this???
Thanks
Regards,
Atul

How SAP Risk Management may be interfaced with SAP Strategy Management?

Hello,
Any document, any customer experience around integration between SAP BusinessObjects Strategy Management and SAP BusinessObjects Risk Management would be very appreciated.
Best regards
Jean-Luc

Hi Renaud,
where you able to create your webservice and use it from GRC RM?
If yes, I would be interested in - 'How do i connect SAP RM 3.0 with that web service'
Regards
Holger

Risk Management in Software Development

Similar Messages

Maybe you are looking for