Akademik Veri Yönetim Sistemi
14th Turkish National Software Engineering Symposium, UYMS 2020, İstanbul, Türkiye, 7 - 09 Ekim 2020
© 2020 IEEE.Software projects that are growing and getting more complex require more effective risk management for project success. Continuous improvement of risk management process can be achieved by utilizing emerging technologies, standards and experiences. In the scope of this study, risk management process improvement activities are implemented and maintained for a year within a sampled set of software development projects carried out by the TÜBITAK-BILGEM Cyber Security Institute. Our achievements, at the end of those activities, include the integration of risk management process with software development life cycle tools, a constantly visible risk treatment plan, while ensuring a proactive risk management approach. In addition, we setup an infrastructure to increase the involvement of stakeholders into the risk management process. The risk management process, which was improved as a result of this study, was implemented in other cyber security projects within TÜBITAK-BIILGEM Cyber Security Institute. In this study, we share our experiences during the adaptation of the process, preparation of management plan and establishment of infrastructure.