Self Assessment

Risk Management Process Self-Assessment
If your organization or project has implemented a risk management process, this survey can help you decide how well the process meets the CMMI goals and specific practices. The first part of the survey deals with specific goals and their associated specific practices. Your process must meet all of these specific goals and practices. The second part of the survey deals with generic goals and their associated generic practices. The extent to which your process meets these generic goals and practices indicates your level of process capability.

Compliance Process

ESC/EN Engineering Process Compliance Procedures, August 2002.

CMMI Risk Management Goals

Specific Goals and Practices:

• SG 1: Prepare for Risk Management
  • SP 1.1: Determine Risk Sources and Categories
  • SP 1.2: Define Risks Parameters
  • SP 1.3: Establish a Risk Management Strategy
  
  
• SG 2: Identify and Analyze Risks
  • SP 2.1: Identify Risks
  • SP 2.2: Evaluate, Categorize, and Prioritize Risks
  
  
• SG 3: Mitigate Risks
  • SP 3.1: Develop Risk Mitigation Plans
  • SP 3.2: Implement Risk Mitigation Plans

Generic Goals and Practices:

• GG 1: Achieve Specific Goals
  • GP 1.1: Perform Base Practices
  
  
• GG 2: Institutionalize a Managed Process
  • GP 2.1: Establish an Organizational Policy
  • GP 2.2: Plan the Process
  • GP 2.3: Provide Resources
  • GP 2.4: Assign Responsibility
  • GP 2.5: Train People
  • GP 2.6: Manage Configurations
  • GP 2.7: Identify and Involve Relevant Stakeholders
  • GP 2.8: Monitor and Control the Process
  • GP 2.9: Objectively Evaluate Adherence
  • GP 2.10: Review Status with Higher Level Management
  
  
• GG 3: Institutionalize a Defined Process
  • Establish a Defined Process
  • Collect Improvement Information
  
  
• GG 4: Institutionalize a Quantitatively Managed Process
  • Establish Quantitative Objectives for the Process
  • Stabilize Subprocess Performance
  
  
• GG 5: Institutionalize an Optimizing Process
  • Ensure Continuous Process Improvement
  • Correct Root Causes of Problems

Risk Review

Guidelines for Risk Management Process Review
Risk Management identifies potential problems before they occur so that risk-handling activities may be planned and invoked as needed across the life of the product or project to mitigate adverse impacts on achieving objectives.