Risk management: moving beyond process

Software risk management is more than just another process; it is a fundamental change in the way uncertainty and decision making are viewed. More specifically, effective risk management requires obtaining functional behavior, not just following a process or having diverse sources of information. Functional behavior is often labeled the absence of dysfunctional behavior, yet eliminating dysfunctional behavior doesn't automatically result in the desired behavior. Rockwell found that they needed to go a step further and devise a plan to "coach" functional behavior. The author describes a plan to elicit the behavior "communicate risk more effectively" which Rockwell identified as a common thread among many functional behaviors. After implementing this plan we noted several improvements, including fewer surprises and crises, even on our most risky programs. Reviews are now more robust, providing more accurate pictures of each program's situation: past, present, and future. It is also easier to identify whether a program is controlling its fate or simply reacting to the world around it.