Difference between revisions of "Risk (glossary)"

From SEBoK
Jump to navigation Jump to search
(Created page with '''<blockquote>A comprehensive, integrated plan that identifies the acquisition approach and describes the business, technical, and support strategies that management will follow ...')
 
Line 1: Line 1:
''<blockquote>A comprehensive, integrated plan that identifies the acquisition approach and describes the business, technical, and support strategies that management will follow to manage program risks and meet program objectives. The Acquisition Strategy should define the relationship between the acquisition phases and work efforts, and key program events such as decision points, reviews, contract awards, test activities, production lot/delivery quantities, and operational deployment objectives. (DAU February 19, 2010)</blockquote>''
+
''<blockquote>(1) Risk is a measure of the potential inability to achieve overall program objectives within defined cost, schedule, and technical constraints and has two components:
 +
#The probability (or likelihood) of failing to achieve a particular outcome and
 +
#The consequences (or impact) of failing to achieve that outcome.
 +
 
 +
A risk has a probability of occurrence that is greater than zero but less than one, a consequence of occurrence greater than zero, and a time-frame in the future. (Conrow 2008) </blockquote>''
 +
 
 +
''<blockquote>(2) In the domain of catastrophic risk analysis, such as for terrorist attacks or natural disasters, risk has three components:
 +
#Threat (the probability that a specific target is attacked in a specific way during a specified period),
 +
#Vulnerability (the probability that damage occurs given a threat), and  
 +
#Consequence (the magnitude and type of damage resulting from an attack or disaster). (Willis et al. 2005) </blockquote>''
  
 
====Source====
 
====Source====
DAU. February 19, 2010. ''Defense Acquisition Guidebook (DAG)''. Ft. Belvoir, VA, USA: Defense Acquisition University (DAU)/U.S. Department of Defense (DoD).  
+
(1) Conrow,E. 2008. ''Risk Analysis for Space Systems''. Paper presented at Space Systems Engineering and Risk Management Symposium, 27-29 February, 2008, Los Angeles, CA, USA.
 +
 
 +
(2) Willis, H. H., A. R. Morral, T. K. Kelly, and J. J. Medby. 2005. ''Estimating Terrorism Risk.'' Santa Monica, CA: The RAND Corporation, MG-388.  
  
 
===Discussion===
 
===Discussion===

Revision as of 15:20, 18 May 2011

(1) Risk is a measure of the potential inability to achieve overall program objectives within defined cost, schedule, and technical constraints and has two components:

  1. The probability (or likelihood) of failing to achieve a particular outcome and
  2. The consequences (or impact) of failing to achieve that outcome.

A risk has a probability of occurrence that is greater than zero but less than one, a consequence of occurrence greater than zero, and a time-frame in the future. (Conrow 2008)

(2) In the domain of catastrophic risk analysis, such as for terrorist attacks or natural disasters, risk has three components:

  1. Threat (the probability that a specific target is attacked in a specific way during a specified period),
  2. Vulnerability (the probability that damage occurs given a threat), and
  3. Consequence (the magnitude and type of damage resulting from an attack or disaster). (Willis et al. 2005)

Source

(1) Conrow,E. 2008. Risk Analysis for Space Systems. Paper presented at Space Systems Engineering and Risk Management Symposium, 27-29 February, 2008, Los Angeles, CA, USA.

(2) Willis, H. H., A. R. Morral, T. K. Kelly, and J. J. Medby. 2005. Estimating Terrorism Risk. Santa Monica, CA: The RAND Corporation, MG-388.

Discussion

Discussion as to why this is the "consensus" definition for the SEBoK.