文档介绍：Draft IEEE P1540
Risk Management Standard
Process & Implications
Dr. Robert N. Charette
ITABHI Corporation
Dr. Patrick O’Brien
Rockwell Collins
Motivation
• RM described inconsistently or minimally in
existing engineering standards
• Several disjoint RM approaches
• Increasing need mon terminology and
framework municate risk information as
RM use increases
ITABHI Corporation
Constraints
•“Minimalist” standard
• Group risk management standard
• In line with IEEE 12207 & others
• ISO risk terminology
• Reduced redundancy
• Don’t take forever
ITABHI Corporation
P1540 Information Needs
Process Management Decisions Technical
Architecture Risk Dimensions and User Feedback
Management
Perspective(s) Processes
Risk “Operational” Profile
Risk Acceptability
Risk Treatment
Core Risk Management Process
Risk
Analysis
Define &
Implement Maintain
Process Risk Model
Risk
Monitoring
Risk “Process” Profile
Improvement Actions
Evaluate
Scope of Standard
Technical & Managerial Processes
• Determine RM information needed & priority
• Define the risk dimensions of concern
• Define the perspectives to be supported
• Define the level(s) of risk acceptability
• Make decisions regarding risk and its management
- risk treatment required or not?
- allocate resources to treatment
- change treatment?
• Make mendations for improving process
ITABHI Corporation
Implement Process
• Establish RM policies
- define how RM is to be performed & what tools
or techniques will be used
- develop RM coordination activities
- define how risk is to municated
• Establish the RM process
• Establish responsibility for performing RM
• petent resources
• Establish RM evaluation process
ITABHI Corporation
Define & Maintain Risk Model
• Define the risk management context
- define the risk context
² what’s the stakeholder(s) perspective(s)?
² what’s the dimension(s) of concern?
² what are the objec