ISO/IEC/IEEE International Standard - Systems and software engineering -- Life cycle processes -- Risk management - Redline

This document is a reference to be used in conjunction with ISO/IEC/IEEE 15288, ISO/IEC/IEEE 12207, ISO 31000 and IEC 31010 or as a stand-alone document. This document: - provides risk management elaborations for the processes described in ISO/IEC/IEEE 15288 and ISO/IEC/IEEE 12207; - provides project-level risk management processes and information items for organizations using ISO 31000 and IEC 31010; it will aid those organizations on projects dealing with man-made systems, software-intensive systems, software and hardware products and services related to those systems and products, regardless of the project scope, product(s), methodology, size or complexity; - specifies the required information items that are to be produced through the implementation of risk management process for claiming conformance; and - specifies the required contents of the information items. This document provides a universally applicable standard for practitioners responsible for managing risks associated with systems and software over their life cycle. This document is suitable for the management of all risks encountered in any organization or project appropriate to the systems or software projects regardless of context, type of industry, technologies utilized, or organizational structures involved.