research-article

Stakeholder Risk Assessment: An Outcome-Based Approach

Authors:

Richard W. Woolridge,

Denise J. McManus,

Joanne E. HaleAuthors Info & Claims

IEEE Software, Volume 24, Issue 2

Pages 36 - 45

https://doi.org/10.1109/MS.2007.54

Published: 01 March 2007 Publication History

Publisher Site

Abstract

Requirements engineering must manage the risks arising from project stakeholders. The Outcome-Based Stakeholder Risk Assessment Model (Obsram) provides guidance in stakeholder identification, identification of stakeholder impacts and perceptions, identification of potentially negative responses that pose risks to the project, and assessment and prioritization of those risks. This information provides valuable input to a risk mitigation plan that let you devote more resources and attention to the stakeholders that pose the greatest risk to your project. A case study offers a practical, step-by-step approach to this process. This article is part of a special issue on stakeholders in requirements engineering.

References

[1]

R. Williams, G. Pandelios, and S. Behrens, "Software Risk Evaluation (SRE) Method Description," tech. report CMU/SEI-99-TR-029, version 2.0, 1999.

Google Scholar

[2]

S. Ward, "Requirements for an Effective Project Risk Management Process," Project Management J., Sept. 1999, pp. 37–43.

Crossref

Google Scholar

[3]

H. Sharp, A. Finkelstein, and G. Galal, "Stakeholder Identification in the Requirements Engineering Process," Proc. 10th Int'l Workshop Database and Expert Systems Applications, IEEE CS Press, 1999, pp. 387–391.

Digital Library

Google Scholar

[4]

IEEE Software, vol. 21, no. 1, 2004, pp. 23–27.

Digital Library

Google Scholar

[5]

A. Pouloudi and E.A. Whitley, "Stakeholder Identification in Inter-Organisational Systems: Gaining Insights for Drug Use Management Systems," European J. Information Systems, vol. 6, no. 1, 1997, pp. 1–14.

Crossref

Google Scholar

[6]

J. Kaler, "Differentiating Stakeholder Theories," J. Business Ethics Dordrecht, vol. 46, no. 1, 2003, pp. 71–83.

Crossref

Google Scholar

[7]

D. Gotterbarn and S. Rogerson, "Responsible Risk Analysis for Software Development: Creating the Software Development Impact Statement," Comm. Assoc. for Information Systems, vol. 15, 2005, pp. 730–750.

Crossref

Google Scholar

[8]

R. Woolridge, J. Hale, and D. Hale, "Strategic IT Project Scoping: The Target State Specific Outcome (TSSO) Method," Proc. Americas Conf. Information Systems (AMCIS), 2006.

Google Scholar

[9]

IEEE Software, vol. 20, no. 5, 2003, pp. 99–101.

Digital Library

Google Scholar

[10]

IEEE Software, vol. 14, no. 3, 1997, pp. 17–19.

Digital Library

Google Scholar

[11]

T. Carbone and D. Tippett, "Project Risk Management Using the Project Risk FMEA," Eng. Management J., vol. 16, no. 4, 2004, pp. 28–35.

Crossref

Google Scholar

Cited By

View all

Penzenstadler BFemmer HRichardson DLago PMeyer NMorisio MMüller HScanniello G(2013)Who is the advocate?Proceedings of the 2nd International Workshop on Green and Sustainable Software10.5555/2662693.2662706(70-77)Online publication date: 20-May-2013
https://dl.acm.org/doi/10.5555/2662693.2662706
Zwikael OElias AAhn M(2012)Stakeholder collaboration and engagement in virtual projectsInternational Journal of Networking and Virtual Organisations10.1504/IJNVO.2012.04573010:2(117-136)Online publication date: 1-Mar-2012
https://dl.acm.org/doi/10.1504/IJNVO.2012.045730
Kusumo DStaples MZhu LJeffery RRuneson PHöst MMendes EAndrews AHarrison R(2012)Analyzing differences in risk perceptions between developers and acquirers in OTS-based custom software projects using stakeholder analysisProceedings of the ACM-IEEE international symposium on Empirical software engineering and measurement10.1145/2372251.2372263(69-78)Online publication date: 19-Sep-2012
https://dl.acm.org/doi/10.1145/2372251.2372263
Show More Cited By

Index Terms

Stakeholder Risk Assessment: An Outcome-Based Approach
1. Human-centered computing
  1. Collaborative and social computing
2. Social and professional topics
  1. Professional topics
    1. Management of computing and information systems
      1. Project and people management
        Project management techniques
        Systems analysis and design
      2. Software management

Recommendations

Risk Management and Risk Assessment at ENISA: Issues and Challenges
ARES '06: Proceedings of the First International Conference on Availability, Reliability and Security

In this talk, the main directions followed in current and future work in the area of Risk Management and Risk Assessment at ENISA will be presented. The efforts in this area range from an initial inventory of Risk Management /Risk Assessment methods and ...
Economic acceptable risk assessment model
InfoSecCD '08: Proceedings of the 5th annual conference on Information security curriculum development

Acceptable risk is the residual risk that follows the implementation of the safeguard. Residual risk is the qualitative or quantitative risk that could not be removed, or which was accepted. Managing the residual risk is the core of risk management. ...
Risk profiles and distributed risk assessment

Risk assessment is concerned with discovering threat paths between potential attackers and critical assets, and is generally carried out during a system's design and then at fixed intervals during its operational life. However, the currency of such ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

IEEE Software Volume 24, Issue 2

March 2007

97 pages

ISSN:0740-7459

Issue’s Table of Contents

Publisher

IEEE Computer Society Press

Washington, DC, United States

Publication History

Published: 01 March 2007

Author Tags

Qualifiers

Research-article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

4
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 09 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Penzenstadler BFemmer HRichardson DLago PMeyer NMorisio MMüller HScanniello G(2013)Who is the advocate?Proceedings of the 2nd International Workshop on Green and Sustainable Software10.5555/2662693.2662706(70-77)Online publication date: 20-May-2013
https://dl.acm.org/doi/10.5555/2662693.2662706
Zwikael OElias AAhn M(2012)Stakeholder collaboration and engagement in virtual projectsInternational Journal of Networking and Virtual Organisations10.1504/IJNVO.2012.04573010:2(117-136)Online publication date: 1-Mar-2012
https://dl.acm.org/doi/10.1504/IJNVO.2012.045730
Kusumo DStaples MZhu LJeffery RRuneson PHöst MMendes EAndrews AHarrison R(2012)Analyzing differences in risk perceptions between developers and acquirers in OTS-based custom software projects using stakeholder analysisProceedings of the ACM-IEEE international symposium on Empirical software engineering and measurement10.1145/2372251.2372263(69-78)Online publication date: 19-Sep-2012
https://dl.acm.org/doi/10.1145/2372251.2372263
Lim SQuercia DFinkelstein AKramer JBishop JDevanbu PUchitel S(2010)StakeNetProceedings of the 32nd ACM/IEEE International Conference on Software Engineering - Volume 110.1145/1806799.1806844(295-304)Online publication date: 1-May-2010
https://dl.acm.org/doi/10.1145/1806799.1806844

Abstract

References

Cited By

Index Terms

Recommendations

Risk Management and Risk Assessment at ENISA: Issues and Challenges

Economic acceptable risk assessment model

Risk profiles and distributed risk assessment

Comments

Information

Published In

Publisher

Publication History

Author Tags

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations