Sources for Software as Risk Management

Question

I'm looking for my own research for sources that look at software as a way to manage risk. I don't mean risk management for software development projects, I mean how working software can automate the management of risk.

My interest is more philosophical: how do people put software in action to practically get control over factors that otherwise would be uncontrollable in an automated way?

The analogy I like to use is that of the speed camera: it's a device that compels drivers to drive more slowly (until they're out of the range of the camera). Instead of manned controls speed cameras automate the deterrence for drivers. These cameras - where installed - reduce the need for preventive police interventions and thus are an effective way to bring down the risk of accidents on that location.

What I'm looking for specifically are books or websites that deal with this kind of research, and case studies of how software has actually succeeded in managing risk (or hasn't).

Thanks for any pointers. If I need to clarify this question please let me know.

Answer 1

You can look at a whole range of issues:

• Software can prevent medical mishaps and prevent thousands of errors that happen each year. Microsoft has initiative called Microsoft Health Common User Interface (CUI), that provides User Interface Design Guidance and Toolkit controls that address a wide range of patient safety concerns for healthcare organizations worldwide.

• Forensic Video Analysis, Facial recognition software, software that can map crime data, and other such softwares can help prevent crime.

• Another item, that I could think of is green computing, and how it relates to global warming. VMWare and such companies produce virtualization software that can help with this.

There are many more such things, and I hope I touched on some of the things you were expecting.

Answer 2

You may be having trouble from a research standpoint because what you're asking is using overloaded terms.

One possibility is that you're thinking about managing risks, like to life and property, caused by software. if so, you should look at RISKS Digest.

Another one is that you're thinking in terms of financial risks, in which case you want to look into actuarial science. If it's that one, let me know as I know of some good groups for that stuff as well.

Yet another is that you're interested in software safety and that sort of thing, in which case you should look at Nancy Leveson's stuff.