IEEE 1540-2001

This standard describes a process for the management of risk during software acquisition, supply, development, operations, and maintenance. It is intended that both technical and managerial personnel throughout an organization apply this standard.

The purpose of this standard is to provide acquirers and developers with a single unifying risk management process that is suitable for use in conjunction with IEEE/EIA 12207. The standard will not provide detailed risk management techniques, but will instead focus on a process for risk management in which any of several techniques might be applied. The standard will address risk management from the viewpoint of enterprise management, rather than from the viewpoint of the particular project.

New IEEE Standard - Superseded. A process for the management of risk in the life cycle of software is defined. It can be added to the existing set of software life cycle processes defined by the IEEE/EIA 12207 series of standards, or it can be used independently.