1

Decide Whether to Customize or Not

• Consider the Risk Management workstream and decide whether it is acceptable for your project, product and organization.
• The standard risk management guidance includes a daily monitoring of risk parameters against identified risks, selection of risk for mitigation, mitigation action planning, and contingency planning.

2

Customize Risk Management

• Optional
• Customize the process template to replace the Risk Management workstream or delete it and add suitable risk management activities at other points in the process definition file.

3

Review Customized Risk Management

• Optional
• Together with the integrated program management (IPM) office and the auditors, review the customized risk management approach for acceptability against the Risk Management (RSKM) CMMI® level 3 process area.

If customizing the risk management strategy, then an updated process template is produced.