Summary

Monitor risks against those identified in the work plan.

Description

Refer to the Risk Management (RSKM) (CMMI-SVC)process area for more information about identifying potential problems before they occur so that risk handling activities can be planned and invoked as needed across the life of the product or work to mitigate adverse impacts on achieving objectives.


Refer to the Work Planning (WP) (CMMI-SVC) process area for more information about identifying risks.


Example Work Products



  1. Records of risk monitoring


Subpractices



1. Periodically review the documentation of risks in the context of the current status and circumstances of the work.

 

An example risk whose status might change is a threat to the continuity of operations, or a change to the average mix of service request types coming from end users. If the risk has become more likely or the possible impact more severe, then corrective action may be necessary.



2. Revise the documentation of risks as additional information becomes available.

As work continues (especially work of long duration or continuous operation), new risks arise. It is important to identify and analyze these new risks. For example, software, equipment, and tools in use can become obsolete; or key staff can gradually lose skills in areas of particular long-term importance to the work group and organization.



3. Communicate the risk status to relevant stakeholders.

 

Examples of risk status include the following:
  • A change in the probability that the risk occurs
  • A change in risk priority