Managing the risks of component-based software engineering

Component-based software engineering (CBSE) offers a new approach to the development of large software-intensive systems. To fully exploit CBSE technology, organisations will need to consider how this technology is best transferred, institutionalised and evolved within the organisation. This paper discusses the risks associated with the adoption of CBSE technology. A model of the risk analysis and management (RAM) process for CBSE technology is proposed as a means of controlling risks. Five CBSE technology risk areas are identified-domain inadequacies, shortfalls in reuse components, shortfalls in the architecture, deficiencies in the CBSE infrastructure and educational issues-and examined. A number of risk management techniques are proposed. Different kinds of risk knowledge are highlighted, and the role of the risk repository explained. The paper closes with a set of RAM guidelines for the risk manager.