A Formal Control Model for Risks Management within Software Projects

This paper presents a proposed Formal Control Model(FCM) using a Colored Petri Net (CPN) and an inspection form for risks management within a software project. The basis for this model was the risk areas of the Capability Maturity Model Integration for Software Development (CMMI-DEV). The integration of risk elements from a formally defined quality model using a graphical and mathematical modeling tool has provided risks management. On the context of a Management Information System (MIS), a FCM prototype was developed to reduce human inference dependences, supporting organizational goals to track critical points for decision makers. The major contribution of this paper was the FCM conceptualization and application. The proposed model was applied to a project within the financial department of an enterprise CMMI level 5. It was able to identify, control, and manage risks of software development using a SG concept of CMMI risk applied to certain other CMMI PAs. At the end, a successful case study was performed involving the two experiments of Project Planning(PP) and Risk Management (RSKM). Their assessments have shown that after the proposed FCM execution, PENDING activities were completely fixed.