Aligning Business Goals and Risks in OSS Adoption

Dolors Costal, Lidia López, Mirko Morandini, Alberto Siena, Maria Carmela Annosi, Daniel

Gross, Lucía Méndez, Xavier Franch, Angelo Susi

Aligning Business Goals and Risks in OSS Adoption

2

Agenda

Motivation

How to integrate Goal and Risk Models

Example: Risk Analysis

Conclusions and Future Work

Applying Business Strategy Models in Organizations.ER 2014, 27-29th October 2014

3

Motivation: RISCOSS EU Project

Aligning Business Goals and Risks in OSS AdoptionER 2015, 19th-22nd October 2015

Assess the decision-makers to identify, manage and mitigate risks inherent to

the OSS adoption

4

3-layer Approach


Software and Business Models

Raw Data

OSS Project Indicators

OSS Community Indicators

Context Indicators

Layer 3Business Analysis

Layer 2Risk Indicators

Layer 1Data Gathering Context

OSS Project OSS Communities

Risk Manager

5

Model-based Approach


expose

indicate

impact

Business & Strategic

Goals

Risks

&

Indicators

Data Gathering

i*

RiskML

Reduced quality

Low code stability

Low testability

Test coverage

6Aligning Business Goals and Risks in OSS Adoption

ER 2015, 19th-22nd October 2015

The Problem

#Commits/Month #Posts/Day

Low Activity

Low release frecuency

7

Connecting Risks to Business Goals

RQ1 What is the conceptual relationship between OSS adoption risks and the adopter organization business goals? – RQ1.1: How to integrate risk and goal-oriented modelling

approaches?– RQ1.2: How to integrate risk and goal-oriented models

(at instance level)? RQ2 How do OSS adoption risks affect the adopter

organization business goals?

Researh Ojective

Applying Business Strategy Models in Organizations.i* Workshop, 15-16 June 2014.

RISKS & GOAL-ORIENTEDINTEGRATED META-MODEL

RQ1.1: How to integrate risk and goal-oriented modelling?

9

Conceptual Relationship?


?UFO

10

Using UFO for…


i*

RiskML

UFO

UFO

Overlapping Concepts

11

Overlaping Concepts


UFO-i*: Guizzardi, R.S.S, Franch, X., Guizzardi, G.: Applying a foundational ontology to analyze means-end links in the i* framework. RCIS 2012: 1-11

i* concepts RiskML concepts

Goal SoftGoal

UFO concepts Goal

related to sets of intended states of affairs of an agent

Goal with no clear-cut satisfaction criteria

Actor intention

12

Overlaping Concepts



i* concepts RiskML concepts

Goal TaskSoftGoal

UFO concepts Goal Event Universal

ActionUniversal

specific way of doing something [for achieving a goal]

intentional event performed by agents with the purpose ofachieving goals

13

Overlaping Concepts



i* concepts

Goal

RiskML concepts

Goal TaskSoftGoal


ActionUniversal

related to sets of intended states of affairs of an agent

of interest for a stakeholder to

obtain or maintain

14

Overlaping Concepts



i* concepts

Goal Event

RiskML concepts

Goal TaskSoftGoal


ActionUniversal

changes in states of affairs

[exposed by situations]

entities that occur in time [triggered by certain sitations]

15

Overlaping Concepts



i* concepts

Goal Event

RiskML concepts

Goal TaskSoftGoal


ActionUniversal

i*RiskML

Event

16

Impact Relationship?


impact

17



impact

?Underlyging goals to perform tasks and having resource

18



Intentional Element

19

Integrated Metamodel


INTEGRATING RISKS & GOALS MODELS

RQ1.2: How to integrate risk and goal-oriented models (at instance level)?

21

TEI Business Model (i*)


22

Maintenance Risk Model (RiskML)


Aligning Method – Equivalence



Aligning Method – Equivalence



impacts

impacts

impacts

25

Aligning Method – Sumsumption


26

Aligning Method – Sumsumption


27

Aligning Method – Missing


?

?

28

Aligning Method – Missing


29

TEI Business Model + Maintenance Risk Model


RISKS ANALYSIS

RQ2 How do OSS adoption risks affect the adopter organization business goals?

31

Risk Analysis Model-based analysis of OSS ecosystems From metrics of OSS projects to their impact on

business goals Forward quantitative inference algorithms to evaluate

risk exposure– indicator values mapped onto the satisfaction evidence of

situations– situation satisfaction raises or lowers the occurrence

likelihood of events (expose and protect)– impact of risk events on the software ecosystems is captured

by goal analysis, based on Satisfiability and Deniability evidence


32

Risk Analysis for TEI


CONCLUSIONS FUTURE WORK

34Applying Business Strategy Models in Organizations.

i* Workshop, 15-16 June 2014.

Conclusions

RQ2

RQ1.1

UFO

RQ1.2

35

Future Work Importance for goals Study the influence that the OSS adoption can

influence the OSS community, modifying the risk exposure

Refining the Alignment process (e.g. impacting dependums)

Further validation

Applying Business Strategy Models in Organizations.i* Workshop, 15-16 June 2014.

Lidia López – [email protected]

www.essi.upc.edu/~gessi@gessi_upc

Thank you

http://www.essi.upc.edu/~gessi