3.4 Risk Management
The Risk Management discipline uses the goals iden-
tified into the organizational modeling and require-
ments analysis disciplines as fundamental scope el-
ements. Consequently the identified threats are eval-
uated on the basis of their impact on these elements.
We define a threat as an event that can negatively af-
fect the proper resolution of a goal or that can be the
result of the misuse of a goal execution both in terms
of goal achievement and degradation of quality. A
threat is expressed as an aggregate risk with a quantifi-
cation of the negative impact and a occurrence proba-
bility. A threat is later refined into a series of softgoals
with respect to the transformation process.
Risk analysis was done in collaboration with
stakeholders estimating and validating the possible
threats impact. Risk quantification is done on a dou-
ble basis. Firstly the general threat weight is esti-
mated on the basis of the impact it can have on the
project under development, the system-to-be or the
concerned organization. Secondly, the involvement
of each goal with respect to the risk evoked is eval-
uated following a Low/Medium/High scale. This has
led to the identification of six categories of threats:
• Requirements Poorly Understood: the system
does not run as expected. This threat is partic-
ularly faced by user-intensive software applica-
tions. This kind of risk has a weight of 3 since
huge resources can be devoted to produce an in-
adequate system;
• Facility Damage: it concerns the damages caused
to production facilities. A representative exam-
ple is when the pusher machine pushes while hot
coke is stuck in the oven, resulting in damaging
the pusher machine and/or the oven’s walls. This
kind of risk has a weight of 2 since facilities re-
pairs are cost-intensive;
• Mechanical Error: it concerns errors due to ma-
chinery dysfunction. For instance, a failure in the
coke car engine, making impossible to cool down
the coke. This risk has a weight of 1 since it will
delay production;
• Human Injuries: it concerns injury (or even death)
of the staff and/or workers. A coking plant is a
hazardous place; a replacement worker was re-
cently killed in a coke plant in Ohio, and other
numerous accident of this type took place in the
past. This risk has a weight of 3 since it is very
costly in terms of money and reputation;
• Human Error: it concerns errors due to human
intervention. This risk has a weight of 2 since it
can potentially lead to other risks.
• System Failure: the information system is not
available. The system may be down and cannot
be used for a certain amount of time. This risk
has a weight of 1 because it will delay production.
• Data Loss: some needed data is lost or never ex-
isted. It may happen if one of the worker forgets
to encode some data. This risk has a weight of
2 because it will delay production and can poten-
tially lead to other risks.
On the basis of the organizational model of Figure
3 and the risk analysis, the matrix in Figure 4 sum-
marizes the impact of the identified threats onto the
modeled goals. A specific goal is facing a particu-
lar threat is the marked and a measure is given. For
example the goal Aligning faces the threat Mechani-
cal Error even if the probability of occurence of the
threat on the goal remains Low. The overall risk ex-
posure of each goal is finally computed on the basis
of the threats they faced, the intensity and the threat’s
weight.
3.5 Quality Management
The Quality Management discipline uses the goals
identified into the organizational modeling and re-
quirements analysis disciplines as fundamental scope
elements. Consequently the identified Quality Fac-
tors are envisaged on the basis of their impact on
them. Quality factors must firstly be distinguished
from traditional softgoals in the sense defined in
(Chung et al., 2000). Since we address a higher level
business view of the system to-be, we need an abstrac-
tion where we can specify the quality concerns of the
system rather than its states as softgoals would char-
acterize. In this sense, softgoals describe functions
of a system while quality factors do not. We define
a threat as a constraint onto one or more goals in the
form of a degree of excellence. A quality factor is later
refined into a serie of softgoals in the transformation
process.
Quality analysis was done in collaboration with
stakeholders estimating and validating the possible
quality factors impact. That work has led to the iden-
tification of six categories of quality factors:
• Reliability: Software Reliability is the probability
of failure-prone software operation for a specified
period of time in a specified environment. This
quality factor deals with the question: What level
of trust can be placed in what the system does?
• Efficiency: Software Efficiency deals with execu-
tion time, the later can be influenced by source
code optimization, the use of performing algo-
rithmic techniques, faster sequential execution or
GOAL DRIVEN ITERATIVE SOFTWARE PROJECT MANAGEMENT
49