Carnegie Mellon University cmu-wordmark

Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02

• SEI Report
By
This report provides guidelines for implementing a software acquisition risk management program that satisfies the goals of the ARM KPA of the SA-CMM.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-99-HB-001
Topic or Tag

Abstract

In this guidebook, we provide sponsors of acquisition improvement programs and their immediate staff with guidelines on how to implement a software acquisition risk management program satisfying the goals of the Acquisition Risk Management (ARM) Key Process Area (KPA) of the Software Acquisition Capability Maturity Model (SA-CMM). Brief overviews of software acquisition and the SA-CMM are included. This version is an editorial update to align with Version 1.02 of the SA-CMM.

SHARE
Download PDF
Cite This SEI Report

Gallagher, B. (1999, October 1). Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02. (SEI Report CMU/SEI-99-HB-001). Retrieved September 17, 2026, from https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/.

@techreport{gallagher_1999,
author={Gallagher, Brian},
title={Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02},
month={Oct},
year={1999},
number={{CMU/SEI-99-HB-001},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/},
note={Accessed: 2026-Sep-17}
}

Gallagher, Brian. "Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02." (CMU/SEI-99-HB-001). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, October 1, 1999. https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/.

B. Gallagher, "Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-99-HB-001, 1-Oct-1999 [Online]. Available: https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/. [Accessed: 17-Sep-2026].

Gallagher, Brian. "Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02." (SEI Report CMU/SEI-99-HB-001). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Oct. 1999. https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/. Accessed 17 Sep. 2026.

Gallagher, Brian. Software Acquisition Risk Management Key Process Area (KPA)--A Guidebook Version 1.02. CMU/SEI-99-HB-001. Software Engineering Institute. 1999. https://www.sei.cmu.edu/library/software-acquisition-risk-management-key-process-area-kpa-a-guidebook-version-102/

Ask a question about this SEI Report