Risks Management Plan.docx

Risks Management Plan.docx

《Risks Management Plan.docx》由会员分享，可在线阅读，更多相关《Risks Management Plan.docx（15页珍藏版）》请在冰点文库上搜索。

RisksManagementPlan

RiskManagementPlan

CBAMobileBankingApplication

NazirEl-Kayssi-5562660

MattGraham-5230038

ZhihengYi-7475788

YuanyuanLi–7499879

TableofContents

1.0Introduction3

1.1Purpose3

1.2Scope3

2.0RiskCategorizationTable3

3.0RiskRanking7

3.1Analyze7

3.2Verify/DetermineRiskImpact8

3.3Verify/DetermineRiskProbability9

3.5Verify/DetermineRiskRating10

4.0KeyRiskIdentification10

5.0ProjectRiskReportingFormat11

5.1Purpose11

5.2Informationincluded11

5.3ProjectRiskReport12

5.4RiskChangeReport13

1.0Introduction

1.1Purpose

ThepurposeofthisRiskManagementPlan（RMP）istodescribethemainrisksoftheprojectandclassifythembyriskmanagementmethodology.Thisdocumentalsodefinesthekeyrisksandriskreportingformat.

1.2Scope

ThescopeofthisdocumentpertainstothemobilebankingapplicationProjectanditsinternalandexternalrisks.TheriskmanagementmethodologyidentifiedinthisdocumentwillbeprimarilyusedbyonlinebankingapplicationandistobeusedduringtheentireProject.

2.0RiskCategorizationTable

RiskFactorsandCategories

Rating（HML）

L-LowRiskEvidence

M-MediumRiskEvidence

H-HighRiskEvidence

MissionandGoalsFactors

ProjectFit

L

Directlysupportsorganizationmissionand/orgoals

Indirectlyimpactsoneormoregoals

Doesnotsupportorrelatetoorganizationmissionorgoals

WorkFlow

L

Littleornochangetoworkflow

Willchangesomeaspectorhavesmalleffectonworkflow

Significantlychangestheworkflowormethodoforganization

ProjectOrganizationandManagementFactors

OrganizationStability

M

Littleornochangeinmanagementorstructureexpected

Somemanagementchangeorreorganizationexpected

Managementororganizationstructureiscontinuallyorrapidlychanging

ExecutiveCommitteeAttitude

L

Reallycareabouttheprocessoftheproject

Willingtodo

Don'tcareabouttheproject

DevelopmentTeamStability

L

Littleornochange

Someofmembersmaychange

Thewholeteammemberwouldchange

Communication

M

Clearlycommunicatesgoalsandstatusbetweentheteamandrestoforganization

Communicatessomeoftheinformationsomeofthetime

Rarelycommunicatesclearlyto theteamortootherswhoneedtobeinformedofteamstatus

DocumentsStability

L

Documentswillbeavailableontimeandwillcontainfewerrors

Somedocumentsmaybelateandcontainminorerrors

Littlechanceofgettingdocumentsontime,manycorrectionsandchangesexpected

AccuracyofDocumentsandData

M

Projectdocument,paperanddataareveryaccurateanddetailed

Incomplete,inaccuratedocumentanddata

Nonexistentorlost

Lackofproperplanning

H

Greatprojectmanagementplan

Sortoflackingsomedetail,doesn’tcoveranything

Poorprojectplan

Lackofmanagementofexperienceandexpertise

H

ExcellentPMandexpertsmanagetheprojectandresource

PMhassomemanagementexperience,butnotcomprehensive

PMcan’tmanagetheprojectwell

CustomerFactors

CustomerInvolvement

L

Endusershighlyinvolvedwithprojectteam,providesignificantinput

Endusersplayminorroles,moderateimpactonsystem

Minimalornoenduserinvolvement;littleenduserinput

CustomerExperience

L

Endusershighlyexperiencedinsimilarprojects;havespecificideasofhowneedscanbemet

Endusershaveexperiencewithsimilarprojectsandhaveneedsinmind

Endusershavenopreviousexperiencewithsimilarprojects;unsureofhowneedscanbemet

Customerfeedback

L

Promptfeedback

Slowandlackingfeedback

Veryslowornofeedback

Communicationwithcustomers

M

Thoroughcommunicationwithcustomers

Fewcommunicationwithcustomers

Nocommunicationwithcustomers

Budget/Cost/ScheduleFactors

ProjectSize

L

Small,non-complex,oreasilydecomposed

Medium,moderatecomplexity,decomposable

Large,highlycomplex,ornotdecomposable

BudgetPlan

L

Sufficientanddetailedbudgetplan

Questionablebudget

Poorbudgetplan

SchedulePlan

M

Completedontime

Mostprogressareontime

Extendforalongtime

ProjectContent

RequirementsStability

L

Littleornochangeexpectedtoapprovedset（baseline）

Somechangeexpectedagainstapprovedset

Rapidlychangingornoagreed-uponbaseline

RequirementsCompleteandClear

L

Allcompletelyspecifiedandclearlywritten

Somerequirementsincompleteorunclear

Somerequirementsonlyintheheadofthecustomer

DesignDifficulty

L

Welldefinedinterfaces;designwellunderstood

Unclearhowtodesign,oraspectsofdesignyettobedecided

Interfacesnotwelldefinedorcontrolled;subjecttochange

ImplementationDifficulty

L

Algorithmsanddesignarereasonableforthisteamtoimplement

Algorithmsand/ordesignhaveelementssomewhatdifficultforthisteamtoimplement

Algorithmsand/ordesignhavecomponentsthisteamwillfindverydifficulttoimplement

PerformanceFactors

TestCapability

L

modulardesignallowsforeasycoveragetestplanningandexecution

modulardesignaidsdevelopingtestharnessesforunittest

Nomodulardesignorabilitytoeasilyestablishtestcoverageplanning.

ExpectedTestEffort

L

goodestimateavailable,readilyfitssystemacceptanceprocess

roughestimateoftesttime,maybeabottleneckintheprocess

poorornoestimateoftesttimes,definitechanceofbottleneck

Functionality

L

highlyfunctional,meetsallcustomerneeds

goodfunctionality,meetsmostcustomerneeds

littlefunctionality,manycustomerneedsnotmet

DevelopmentProcessFactors

AlternativesAnalysis

L

analysisofalternativescomplete,allconsidered,assumptionsverifiable

analysisofalternativescomplete,someassumptionsquestionableoralternativesnotfullyconsidered

analysisnotcompleted,notallalternativesconsidered,orassumptionsfaulty

QualityAssuranceApproach

H

QAsystemestablished,followed,effective

proceduresestablished,butnotwellfollowedoreffective

noQAprocessorestablishedprocedures

CommitmentProcess

L

changestocommitmentsinscope,content,schedulearereviewedandapprovedbyallinvolved

changestocommitmentsarecommunicatedtoallinvolved

changestocommitmentsaremadewithoutrevieworinvolvementoftheteam

DevelopmentDocumentation

L

correctandavailable

somedeficiencies,available

nonexistent

UseofDefinedEngineeringProcess

L

developmentprocessinplace,established,effective,followedbyteam

processestablished,butnotfollowedorisineffective

noformalprocessused

EarlyIdentificationofDefects

M

peerreviewsareincorporatedthroughout

peerreviewsareusedsporadically

teamexpectstofindalldefectswithtesting

ChangeControlforWorkProducts

L

formalchangecontrolprocessinplace,followed,effective

changecontrolprocessinplace,notfollowedorisineffective

nochangecontrolprocessused

DefectTracking

M

defecttrackingdefined,consistent,effective

defecttrackingprocessdefined,butinconsistentlyused

noprocessinplacetotrackdefects

DevelopmentEnvironmentFactors

PhysicalFacilities

L

littleornomodificationneeded

somemodificationsneeded;someexistent

majormodificationsneeded,orfacilitiesnonexistent

HardwarePlatform

L

stable,nochangesexpected,capacityissufficient

somechangesunderevolution,butcontrolled

platformunderdevelopmentalongwithsoftware

ToolsAvailability

L

inplace,documented,validated

available,validated,somedevelopmentneeded（orminimaldocumentation）

invalidated,proprietaryormajordevelopmentneeded;nodocumentation

ConfigurationManagement

M

fullycontrolled

somecontrolsinplace

nocontrolsinplace

Security

H

allareasfollowingsecurityguidelines;databackedup;disasterrecoverysysteminplace;proceduresfollowed

somesecuritymeasuresinplace;backupsdone;disasterrecoveryconsidered,butprocedureslackingornotfollowed

nosecuritymeasuresinplace;backuplacking;disasterrecoverynotconsidered

VendorSupport

M

completesupportatreasonableprice&inneededtimeframe

adequatesupportatcontractedprice,reasonableresponsetime

littleornosupport,highcost,and/orpoorresponsetime

StaffFactors

StaffAvailability

L

inplace,littleturnoverexpected;fewinterruptsforfirefighting

available,someturnoverexpected;somefirefighting

highturnover,notavailable;teamspendsmostoftimefightingfires

MixofStaffSkills

M

goodmixofdisciplines

somedisciplinesinadequatelyrepresented

somedisciplinesnotrepresentedatall

ProductKnowledge

H

veryexperiencedatdevelopmentofproduct

someexperienceindevelopmentofproduct

noexperienceindevelopmentofproduct

SoftwareDevelopmentExperience

H

extensiveexperiencewiththistypeofproject

someexperiencewithsimilarprojects

littleornoexperiencewithsimilarprojects

TrainingofTeam

M

trainingplaninplace,trainingongoing

trainingforsomeareasnotavailableortrainingplannedforfuture

notrainingplanortrainingnotreadilyavailable

TeamSpiritandAttitude

M

stronglycommittedtosuccessofproject;cooperative

willingtodowhatittakestogetthejobdone

littleornocommitmenttotheproject;notacohesiveteam

TeamProductivity

L

allmilestonesmet,deliverablesontime,productivityhigh

milestonesmet,somedelaysindeliverables,productivityacceptable

productivitylow,milestonesnotmet,delaysindeliverables

3.0RiskRanking

3.1Analyze

Analyzeistotransformriskitemsintoinformationthatcanbeusedtoaiddecision-makingandtovalidatetheriskinformation,usingriskanalysis.Riskanalysisinvolvesclassificationandprioritizationofriskitems,providingrecommendationsformitigatingandmeasuringriskitems,andr