03 October 2007

RSKM y DAR en CMMi DEV V1.2 (10)

Risk Management (RSKM)

Esta área de proceso (AP), perteneciente al Nivel de Madurez 3, es una propuesta que permite administrar los riesgos de las actividades, las que incluyen la identificación de los parámetros del riesgo, evaluaciones del riesgo y mitigación del riesgo.

RSKM se relaciona con las siguientes AP: PP (Project Planning), PMC (Project Monitoring and Control) y DAR (Decision Analysis and Resolution).

Los objetivos específicos (SG), prácticas especificas (SP) y subprácticas de esta AP son:

SG 1 - Prepare for RSKM

SP 1.1 Determine Risk Sources and Categories

1.1.1- Determine risk sources 1.1.2- Determine risk categories

SP 1.2 Define Risk Parameters

1.2.1- Define consistent criteria for evaluating and quantifying risk likelihood and severity levels. 1.2.2- Define thresholds for each risk category. 1.2.3- Define bounds on the extent to which thresholds are applied against or within a category

SP 1.3 Establish a RSKM Strategy

Los productos de trabajo de las SP son: - Risk source lists (external and internal) (SP 1.1) - Risk categories list (SP 1.1) - Risk evaluation, categorization, and prioritization criteria (SP 1.2) - Risk management requirements (e.g., control and approval levels, and reassessment intervals) (SP 1.2) - Project risk management strategy (SP 1.3)

SG 2 - Identify and Analyze Risks

SP 2.1 Identify Risks

2.1.1- Identify the risks associated with cost, schedule, and performance 2.1.2- Review environmental elements that may impact the project 2.1.3- Review all elements of the work breakdown structure as part of identifying risks to help ensure that all aspects of the work effort have been considered 2.1.4- Review all elements of the project plan as part of identifying risks to help ensure that all aspects of the project have been considered 2.1.5- Document the context, conditions, and potential consequences of the risk 2.1.6- Identify the relevant stakeholders associated with each risk

SP 2.2 Evaluate, Categorize, and Prioritize Risks

2.2.1- Evaluate the identified risks using the defined risk parameters 2.2.2- Categorize and group risks according to the defined risk categories 2.2.3- Prioritize risks for mitigation

Los productos de trabajo de las SP son: - List of identified risks, including the context, conditions, and consequences of risk occurrence (SP 2.1) - List of risks, with a priority assigned to each risk (SP 2.2)

SG 3 - Mitigate Risks

SP 3.1 Develop Risk Mitigation Plans

3.1.1- Determine the levels and thresholds that define when a risk becomes unacceptable and triggers the execution of a risk mitigation plan or a contingency plan 3.1.2- Identify the person or group responsible for addressing each risk 3.1.3- Determine the cost-to-benefit ratio of implementing the risk mitigation plan for each risk 3.1.4- Develop an overall risk mitigation plan for the project to orchestrate the implementation of the individual risk mitigation and contingency plans 3.1.5- Develop contingency plans for selected critical risks in the event their impacts are realized SP 3.2 Implement Risk Mitigation Plans 3.2.1- Monitor risk status 3.2.2- Provide a method for tracking open risk-handling action items to closure 3.2.3- Invoke selected risk-handling options when monitored risks exceed the defined thresholds 3.2.4- Establish a schedule or period of performance for each risk-handling activity that includes the start date and anticipated completion date 3.2.5- Provide continued commitment of resources for each plan to allow successful execution of the risk-handling activities 3.2.6- Collect performance measures on the risk-handling activities

Los productos de trabajo de las SP son: - Documented handling options for each identified risk (SP 3.1) - Risk mitigation plans (SP 3.1) - Contingency plans (SP 3.1) - List of those responsible for tracking and addressing each risk (SP 3.1) - Updated lists of risk status (SP 3.2) - Updated assessments of risk likelihood, consequence, and thresholds (SP 3.2) - Updated lists of risk-handling options (SP 3.2) - Updated list of actions taken to handle risks (SP 3.2) - Risk mitigation plans (SP 3.2)

Decision Analysis and Resolution (DAR)

Esta AP, perteneciente al Nivel de Madurez 3, soporta todas las AP por medio de la determinación de que resultados estarán sujetos a un proceso de evaluación formal. Se analizan las posibles decisiones usando un proceso de evaluación formal que evalúa las alternativas identificadas y el criterio establecido. DAR se relaciona con las siguientes AP: PP (Project Planning), IPM (Integrated Project Management) y RSKM (Risk Management).

Los objetivos específicos (SG), prácticas especificas (SP) y subprácticas de esta AP son:

SG 1 - Evaluate Alternatives

SP 1.1 Establish Guidelines for Decision Analysis

1.1.1- Establish guidelines. 1.1.2- Incorporate the use of the guidelines into the defined process where appropriate.

SP 1.2 Establish Evaluation Criteria

1.2.1- Define the criteria for evaluating alternative solutions. 1.2.2- Define the range and scale for ranking the evaluation criteria. 1.2.3- Rank the criteria. 1.2.4- Assess the criteria and their relative importance. 1.2.5- Evolve the evaluation criteria to improve their validity. 1.2.6- Document the rationale for the selection and rejection of evaluation criteria.

SP 1.3 Identify Alternative Solutions

1.3.1- Perform a literature search. 1.3.2- Identify alternatives for consideration in addition to those that may be provided with the issue. 1.3.3- Document the proposed alternatives.

SP 1.4 Select Evaluation Methods

1.4.1- Select the methods based on the purpose for analyzing a decision and on the availability of the information used to support the method. 1.4.2- Select evaluation methods based on their ability to focus on the issues at hand without being overly influenced by side issues. 1.4.3- Determine the measures needed to support the evaluation method.

SP 1.5 Evaluate Alternatives

1.5.1- Evaluate the proposed alternative solutions using the established evaluation criteria and selected methods. 1.5.2- Evaluate the assumptions related to the evaluation criteria and the evidence that supports the assumptions. 1.5.3- Evaluate whether uncertainty in the values for alternative solutions affects the evaluation and address as appropriate. 1.5.4- Perform simulations, modeling, prototypes, and pilots as necessary to exercise the evaluation criteria, methods, and alternative solutions. 1.5.5- Consider new alternative solutions, criteria, or methods if the proposed alternatives do not test well; repeat the evaluations until alternatives do test well. 1.5.6- Document the results of the evaluation.

SP 1.6 Select Solutions

1.6.1- Assess the risks associated with implementing the recommended solution. 1.6.2- Document the results and rationale for the recommended solution.

Los productos de trabajo de las SP son: - Guidelines for when to apply a formal evaluation process (SP 1.1) - Documented evaluation criteria (SP 1.2) - Rankings of criteria importance (SP 1.2) - Identified alternatives (SP 1.3) - Selected evaluation methods (SP 1.4) - Evaluation results (SP 1.5) - Recommended solutions to address significant issues (SP 1.6)

Prácticas Genéricas por Objetivo de RSKM y DAR

Solo Representación Continua

GG 1 - Achieve Specific Goals

The process supports and enables achievement of the specific goals of the process area by transforming identifiable input work products to produce identifiable output work products.

GP 1.1 - Perform Specific Practices

Perform the specific practices of the decision and analysis resolution process to develop work products and provide services to achieve the specific goals of the process area.

Solo Representación Continua

GG 2 - Institutionalize a Managed Process

The process is institutionalized as a managed process.

GP 2.1 - Establish an Organizational Policy

Establish and maintain an organizational policy for planning and performing the decision and analysis resolution process.

GP 2.2 - Plan the Process

Establish and maintain the plan for performing the decision and analysis resolution process.

GP 2.3 - Provide Resources

Provide adequate resources for performing the decision and analysis resolution process, developing the work products, and providing the services of the process.

GP 2.4 - Assign Responsibility

Assign responsibility and authority for performing the process, developing the work products, and providing the services of the decision and analysis resolution process. GP 2.5 - Train People

Train the people performing or supporting the decision and analysis resolution process as needed.

GP 2.6 - Manage Configurations

Place designated work products of the decision and analysis resolution process under appropriate levels of control.

GP 2.7 - Identify and Involve Relevant Stakeholders

Identify and involve the relevant stakeholders of the decision and analysis resolution process as planned.

GP 2.8 - Monitor and Control the Process

Monitor and control the decision and analysis resolution process against the plan for performing the process and take appropriate corrective action.

GP 2.9 - Objectively Evaluate Adherence

Objectively evaluate adherence of the decision and analysis resolution process against its process description, standards, and procedures, and address noncompliance.

GP 2.10 - Review Status with Higher Level Management

Review the activities, status, and results of the decision and analysis resolution process with higher level management and resolve issues.

Representación Continua y por Etapas

GG 3 Institutionalize a Defined Process

The process is institutionalized as a defined process.

GP 3.1- Establish a Defined Process

Establish and maintain the description of a defined decision and analysis resolution process

GP 3.2 - Collect Improvement Information

Collect work products, measures, measurement results, and improvement information derived from planning and performing the decision and analysis resolution process to support the future use and improvement of the organization’s processes and process assets.

Solo Representación Continua

GG 4 - Institutionalize a Quantitatively Managed Process

The process is institutionalized as a quantitatively managed process

GP 4.1 - Establish Quantitative Objectives for the Process

Establish and maintain quantitative objectives for the decision and analysis resolution process, which address quality and process performance, based on customer needs and business objectives.

GP 4.2- Stabilize Subprocess Performance

Stabilize the performance of one or more subprocesses to determine the ability of the decision and analysis resolution process to achieve the established quantitative quality and process-performance objectives.

Solo Representación Continua

GG 5 - Institutionalize an Optimizing Process

The process is institutionalized as an optimizing process.

GP 5.1 - Ensure Continuous Process Improvement

Ensure continuous improvement of the decision and analysis resolution process in fulfilling the relevant business objectives of the organization.

GP 5.2 - Correct Root Causes of Problems

Identify and correct the root causes of defects and other problems in the decision and analysis resolution process.