Unit 1 University of Sunderland COMM80 Risk Assessment of Systems Change Risk Aspects and Context Covered in the Module COMM80: Risk Assessment of Systems

Unit 1University of Sunderland COMM80 Risk Assessment of Systems Change

Risk Aspects and Context Risk Aspects and Context Covered in the ModuleCovered in the Module

COMM80: Risk Assessment of Systems Change

Unit 1


Objectives of Objectives of Session CoverageSession Coverage

• To provide a matrix of the coverage intended.

• To outline the manner in which the topics of the module are covered.


Matrix: Coverage in Matrix: Coverage in the modulethe module

Risk Perspective

Risk Lifecycle

Generic (A) Finance (B) Personnel (C) Business Fit (D) Infrastructure (E) SystemsIntegration

(F) SystemsDevelopment

IdentifyBrainstorming,interviewing,existing lists

Generic SSM,RAMESES

questionnaires

RAMESES Generic SERUM, Goals/requirements stuff,

RAMESES

TBQ,RAMESESspecification

Analyse Prioritisation,ranking

DCF, WeightedDecision, Cost

Benefit Analysis

SSM, CATWOE RAMESES

Decision point foraccepting risks

DCF, WD, CBAbased decision

making,RAMESES RiskGauges (partial)

Root Definition, RAMESES RiskGauges

Evolutionarydevelopment

approach

Plan mitigation Examples

Plan contingencies Examples

Track

ControlCharacteristics Financial

modellingAbility to

adapt/change,training,

recruitment issues

Map of system tobps, explicit

understanding ofbusiness

requirement

Examplese offeasibility ofsystem beingbased on the

existinginfrastructure:

network, o/s etc

Requirements tohave different

systemscommunicate,

Issues of data, etc

Availability ofdevelopment

team,development

approach used and“riskiness” of that.

Requirementsspecification,

Techniques DCF, WeightedDecision, Cost

Benefit Analysis

RAG,Goal/stakeholders,

GQM, …

TBQ,

Methods Riskit, Simulate RAMESES, SSM RAMESES RISKIT? SERUM SEI-SRE, RISKIT


Unit 2:Unit 2:

Risk Perspective

Risk Lifecycle



• Systems Change and its attendant risks can be considered from a range of perspectives. Those we consider are:– (A) Finance– (B) Personnel– (C) Business Fit– (D) Infrastructure– (E) Systems Integration– (F) Systems Development

• Tutorial: Group activities focusing on systems change.

Introduce Systems Change and Its Perspectives.Introduce Systems Change and Its Perspectives.


Unit 3:Unit 3:

• Risks.– Definition of risk– Facets of risk that need to be

considered – Generic Risk Life cycle

• Tutorial: student analysis of documented risks.

Introduction to Risk.Introduction to Risk.

Risk LifecycleIdentifyAnalyseDecision Point for accepting risksPlan MitigationPlan ContingenciesTrack Control


Unit 4:Unit 4:

• Focus is initially on generic techniques for risk identification.

• Then introduce some specific techniques that fit well with particular perspectives– e,g, rich pictures, SEI’s TBQ.

• Tutorial: student practice on case study

Risk Perspective

Risk Lifecycle




Generic SSM,RAMESES

questionnaires


RAMESES


Risk identification: generic techniques and perspectives.


Unit 5:Unit 5:

• Continued focus on specific techniques and perspectives.– (Where do these fit in

a method)• Tutorial: student

practice on case study.

Risk Perspective

Risk Lifecycle

(B) Personnel

Identify SSM,RAMESES

questionnairesCharacteristics Ability to

adapt/change,training,

recruitment issuesMethods RAMESES, SSM

Risk identification


Unit 6:Unit 6:

• Reasons why so important • Standard techniques: e.g. prioritisation, ranking.• Specific techniques: e.g. Discount Cash Flow, SSM’s

rich pictures• Tutorial: student presentation of “group activity” for

assignment 1.

Risk Perspective

Risk Lifecycle




Generic SSM,RAMESES

questionnaires


RAMESES


Analyse Prioritisation,ranking.AHP, …


Benefit Analysis

SSM, CATWOE RAMESES

Methods Riskit, Simulate RAMESES, SSM RAMESES RISKIT? SERUM SEI-SRE, RISKIT

Risk assessment: generic concept


Unit 7:Unit 7:

• Focus on Riskit Analysis Graph and relevant perspectives– (Where RAG fits in RISKIT)– Perspective: Infrastructure examples.

• Tutorial: student practice on case study.

Risk Perspective Risk Lifecycle

(D) Infrastructure

Analyse Characteristics Examples for feasibility of system being based on

the existing infrastructure: network, o/s etc

Techniques RAG, Goal/stakeholders, GQM, … Methods RISKIT suitable

Risk assessment: Riskit Analysis Graph


Unit 8:Unit 8:

• Financial perspective • Introduce the idea of

comparative analysis:– what-if scenarios of DCF,

– other options such as AHP, Decision trees (students to investigate in self study):

• Tutorial: student practice on case study.

Risk Perspective

Risk Lifecycle

Generic (A) Finance


Generic

Analyse Prioritisation,ranking.AHP, …


Benefit Analysis

Methods Riskit, Simulate

Risk assessment: Discounted Cash Flow


Unit 9:Unit 9:

• Focus on RAMESES Business Activity Maps

• Focus on perspective of fit of system to business.– Layers of information,

• current,

• proposed system

• Tutorial: consideration of usage.


(C) Business Fit

Analyse RAMESES Business Activity

Maps Characteristics Map of system to

bps, explicit understanding of

business requirement

Techniques Business Activity Maps

Methods RAMESES

Risk Assessment: Business Activity Maps


Unit 10:Unit 10:

• Tutorial: continue study of case study, group sessions to query for further information and make valid assumptions for the perspective they’re taking.

Risk Perspective

Risk Lifecycle

(A) Finance (C) Business Fit (E) SystemsIntegration

Decision point foraccepting risks

DCF, WD, CBAbased decision

making,RAMESES RiskGauges (partial)

RAMESES RiskGauges

Evolutionarydevelopment

approach

Characteristics Financialmodelling

Map of system tobps, explicit

understanding ofbusiness

requirement

Requirements tohave different

systemscommunicate,

Issues of data, etcTechniques DCF, Weighted

Decision, CostBenefit Analysis

Methods RAMESES SERUM

Continue or Abandon?

how to evaluate the impact?

Pareto ScenariosDCF and financial justification,

RAMESES risk gauges,

SERUM: evolutionary development concept.

Decision points.


Unit 11:Unit 11:

• Techniques– RISKIT taxonomy– Risk RADAR

(documentation)


(D) Infrastructure (F) Systems Development

Plan mitigation Example scenarios SEI approach Plan contingencies Example scenarios SEI approach Characteristics Example scenarios Availability of

development team,

development approach used and “riskiness” of that.

Requirements specification,

Techniques RAG, Goal/stakeholders,

GQM, Risk RADAR

documentation

TBQ, Risk RADAR

documentation

Tutorial: discussion of mitigation strategies and contingency options for case study organisations

Mitigation and Contingency Planning.


Unit 12:Unit 12:

• Focus on Network and Systems Interaction– Examples of effective strategies, and failures.

• Tutorial: based on network issues.

Mitigation and Contingency Planning.


Units 13, 14 and 15:Units 13, 14 and 15:

• Overview of different methods, chosen from (e.g.):– RISKIT, RAMESES, SERUM, Boehm’s win-win model.

• Tutorials: – Discussion of potential for application of methods in

context of systems change (reliant on student reading).– Consultation time for assignment.

Risk Perspective

Risk Lifecycle



Methods Riskit, Simulate RAMESES, SSM RAMESES RISKIT? SERUM SEI-SRE,RISKIT, Boehm’s

win-win model

Pulling It All Together

Documents

Unit 1 University of Sunderland COMM80 Risk Assessment of Systems Change Risk Aspects and Context Covered in the Module COMM80: Risk Assessment of Systems