Home
RISCOSS approach to the problem of risk management in OSS is based on a three-layered strategy. The layers cover the gathering of data from OSS communities, OSS projects and experts (Layer I), a population of risk indicators variables (Layer II) that can be then analysed in order to establish a top layer presenting the impact of risks on business goals (Layer III).
In Layer I we deal with data collected from OSS communities, projects and experts that determines the risk drivers resulting from raw data collected over time and aggregated over specific time windows. Layer II it is defined the set of indicators of possible risks and models that allow linking these risks to the possible objectives of the adopting organization. The indicators are variables extracted via the analysis of the data coming from Layer I. Risk Models allow the representation of the possible causes of risks, the risk indicators, and of their connection to the possible risk events for the adopter organization (Layers I and II). Moreover, the risk model also allows representing the impact that the possible risk events have on the strategic and business goals of the organization as presented in Layer III. The strategic and business goals are represented in the Goal Models.
#Tutorials/Guides for modellers
[How to contribute to the riscoss risk modeling repository](How to contribute to the riscoss risk modeling repository)
[How to create a Risk Model](How to create a Risk Model)
[How to create a Goal Model](How to create a Goal Model)
- [oss acquisition.istarml](OSS Acquisition model)
- [oss integration.istarml](OSS Integration model)