Describing OCTAVE (Operationally Critical Threat, Asset and Vulnerability Evaluation), a method of evaluating information security risk, this text should be of interest to risk managers.

Few software projects are completed on time, on budget, and to their original specifications. Focusing on what practitioners need to know about risk in the pursuit of delivering software projects, Applied Software Risk Management: A Guide for Software Project Managers covers key components of the risk management process and the software development process, as well as best practices for software risk identification, risk planning, and risk analysis. Written in a clear and concise manner, this resource presents concepts and practical insight into managing risk. It first covers risk-driven project management, risk management processes, risk attributes, risk identification, and risk analysis. The book continues by examining responses to risk, the tracking and modeling of risks, intelligence gathering, and integrated risk management. It concludes with details on drafting and implementing procedures. A diary of a risk manager provides insight in implementing risk management processes. Bringing together concepts across software engineering with a project management perspective, Applied Software Risk Management: A Guide for Software Project Managers presents a rigorous, scientific method for identifying, analyzing, and resolving risk.

A practical, real-world guide for implementing enterprise risk management (ERM) programs into your organization Enterprise risk management (ERM) is a complex yet critical issue that all companies must deal with in the twenty-first century. Failure to properly manage risk continues to plague corporations around the world. ERM empowers risk professionals to balance risks with rewards and balance people with processes. But to master the numerous aspects of enterprise risk management, you must integrate it into the culture and operations of the business. No one knows this better than risk management expert James Lam, and now, with Implementing Enterprise Risk Management: From Methods to Applications, he distills more than thirty years' worth of experience in the field to give risk professionals a clear understanding of how to implement an enterprise risk management program for every business. Offers valuable insights on solving real-world business problems using ERM Effectively addresses how to develop specific ERM tools Contains a significant number of case studies to help with practical implementation of an ERM program While Enterprise Risk Management: From Incentives to Controls, Second Edition focuses on the "what" of ERM, Implementing Enterprise Risk Management: From Methods to Applications will help you focus on the "how." Together, these two resources can help you meet the enterprise-wide risk management challenge head on—and succeed.

Winner of the Project Management Institute’s David I. Cleland Project Management Literature Award 2010 It’s no wonder that project managers spend so much time focusing their attention on risk identification. Important projects tend to be time constrained, pose huge technical challenges, and suffer from a lack of adequate resources. Identifying and Managing Project Risk, now updated and consistent with the very latest Project Management Body of Knowledge (PMBOK)® Guide, takes readers through every phase of a project, showing them how to consider the possible risks involved at every point in the process. Drawing on real-world situations and hundreds of examples, the book outlines proven methods, demonstrating key ideas for project risk planning and showing how to use high-level risk assessment tools. Analyzing aspects such as available resources, project scope, and scheduling, this new edition also explores the growing area of Enterprise Risk Management. Comprehensive and completely up-to-date, this book helps readers determine risk factors thoroughly and decisively...before a project gets derailed.

Project success is an elusive goal in every business or technical domain. Project failure usually results from unhandled risks to the technical, cost, and schedule aspects of the project. There are four primary root causes of project failure. Unrealistic performance expectation, with missing Measures of Effectiveness Unrealistic cost and schedule estimates based on inadequate risk adjusted growth models Inadequate assessment of risk and unmitigated exposure to these risks without proper handling strategies Unanticipated technical issues with alternative plans and solutions to maintain the effectiveness of the project processes and its deliverables Risk Management provides a comprehensive overview of the people, principles, processes, and practices as the fundamental base upon which an effective risk management system resides. However, this does not guarantee effective risk management and successful projects and businesses. The first half of the book describes risk management processes, as well as a delineation between risk and hazards and how these are connected. The second half of the book provides industry examples of the approach to risk management in specific context and with specific approaches and artifacts where applicable. The book focuses on risks created by uncertainty, their identification, and the corrective and preventive actions needed to address these risks to increase the probability of project success. The book’s goal is to provide a context-driven framework, developing a foundation for a rational approach to risk management that makes adaptation to circumstances as easy as possible.