A risk-based approach for the evaluation on software maintenance options for militarized avionics

In support of a software support decision, MITRE has created a risk-based analysis approach to determine the most appropriate organization to maintain the fielded software. The approach for the risk analysis consisted of defining the risk categories and developing a supporting risk assessment questionnaire. Questions created for this risk assessment were divided into three risk areas: product, program, and organizational. The answers to these questions supported the risk, technical, and cost assessments. Criteria were established to determine the significance of the answers to the risk related questions. Based on the scoring, it can be determined whether the risk was high, medium, or low for each area and recommendations can be formulated and presented.