Software Engineering Institute Carnegie Mellon

Risk and Opportunity Management
Getting Started
Research
Tools & Methods
Consulting
Our People
Publications
Presentations and Multimedia
Acquisition Support Program

Risk and Opportunity Management

  


News and Notes

Register Now for the Risk Management Webinar on Thursday!

A Practical Approach for Managing Risk, Chris Alberts and Audrey Dorofee, June 18th, 2009, 1:00-2:00 p.m. EST.


Register Now for the June or October 2009 Continuous Risk Management course!


Is Your Program on Track for Success: Twenty Questions Every Program Manager Should Be Able to Answer

Every program manager should be able to answer basic questions about their program's risk and chances of success. In this just released document, Systemic Risk Management: Twenty Questions for Program Managers, you can use the broad-based questions to quickly assess the basic health of your program.

This basic assessment is part of SEI Mosaic and designed for use with a course or workshop.

The SEI has been conducting research and development in various aspects of risk management for nearly 20 years. The Continuous Risk Management (CRM) approach to managing project risk is still in use today—almost 15 years after it was released, and the risk taxonomies developed by the SEI remain the most definitive works on the topic today. But the work at the SEI hasn’t stopped because, despite the plethora of risk management approaches, methods, tools, and techniques, programs continue to fail from risks that turn into preventable catastrophes.

From Continuous Risk Management to SEI Mosaic

Most current approaches to risk management employ tactical, bottom-up approaches to analyzing numerous risk statements. These methods have, in today’s complex, distributed programs and environments, led to partial views of the “big picture” and inefficient allocation of scarce resources. Many risk management processes have turned into time and resource-intensive bureaucratic nightmares that, in the end, do not provide the right information to support decision makers. The SEI recognized that something else clearly was needed to return risk management to its original purpose—supporting effective management decisions that lead to program success.

Current SEI research is focused on systemic risk management—top-down, system-oriented analyses of risk in relation to program objectives—which is better suited to managing risk in distributed environments. This research has brought about the development of a suite of methods—Mosaic—that can be used to manage risk and opportunity across the life cycle and supply chain, enabling decision makers to more efficiently engage in the risk management process, navigating through a broad tradeoff space (including performance, reliability, safety, and security considerations, among others) and strategically allocating their limited resources when and where they are needed the most.

We have found systemic approaches to be better suited for managing risk and opportunity in distributed environments. In contrast to the bottom-up analyses employed in tactical risk management, systemic approaches incorporate top-down, system-oriented analyses of risk in relation to program objectives.

 


For more information about SEI risk solutions or to contact a member of the Risk and Opportunity Management research team, send email to customer-relations@sei.cmu.edu.