Risk analysis (probability and impact) in Software Engineering - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is risk analysis in software engineering?

Risk analysis is the process of identifying potential problems that could affect a project and evaluating their likelihood and impact to manage them effectively.

beginner

What does 'probability' mean in risk analysis?

Probability is the chance or likelihood that a specific risk event will happen during a project.

beginner

What does 'impact' mean in risk analysis?

Impact refers to the effect or consequence a risk event would have on the project if it occurs, such as cost increase or delay.

intermediate

How do probability and impact work together in risk analysis?

They combine to help prioritize risks: high probability and high impact risks need more attention than low probability or low impact ones.

intermediate

Give an example of a risk with high probability but low impact.

An example is a minor software bug that happens often but only causes a small inconvenience, not stopping the project.

What does the 'impact' of a risk describe?

A The effect on the project if the risk happens

B The number of people affected

C The chance the risk will happen

D The cost to prevent the risk

Impact is about the effect or consequence on the project if the risk occurs.

If a risk has low probability but high impact, what should you do?

A Focus only on high probability risks

B Ignore it because it is unlikely

C Monitor it and prepare a plan just in case

D Assume it will not happen

Even if unlikely, high impact risks need monitoring and planning.

Which of these is an example of a risk with high probability and high impact?

A A common software crash that stops the project

B A rare typo in documentation

C A small UI color mismatch

D A delayed team lunch

A frequent crash that stops the project is both likely and very impactful.

Why is risk analysis important in software projects?

A To avoid all risks completely

B To identify and manage risks before they cause problems

C To increase project costs

D To delay project deadlines

Risk analysis helps manage risks early to reduce problems.

What two factors are combined to prioritize risks?

A Cost and time

B Project phase and budget

C Team size and skills

D Probability and impact

Probability and impact together show which risks need more attention.

Explain how probability and impact help in managing risks in a software project.

Think about how likely a risk is and how bad it would be if it happens.

Describe an example of a risk with low probability but high impact and how you would handle it.

Consider rare but serious problems like data loss or security breaches.

Practice

1. What does risk analysis in software engineering primarily combine?

easy

A. The programming language and the software framework

B. The cost of the project and the team size

C. The number of developers and the project deadline

D. The likelihood of a problem and its potential impact

Solution

1. Step 1: Understand risk analysis components

   Risk analysis involves assessing how likely a problem is and how severe its consequences could be.

2. Step 2: Identify what is combined

   The two main factors combined are probability (likelihood) and impact (severity).

3. Final Answer:

   The likelihood of a problem and its potential impact -> Option D

4. Quick Check:

   Risk = Probability x Impact [OK]

Hint: Risk = chance of problem x how bad it is [OK]

Common Mistakes:

• Confusing risk with project cost
• Mixing team size with risk factors
• Thinking risk depends on programming language

2. Which formula correctly calculates the risk score in risk analysis?

easy

A. Risk score = Probability - Impact

B. Risk score = Probability + Impact

C. Risk score = Probability x Impact

D. Risk score = Impact ÷ Probability

Solution

1. Step 1: Recall risk score calculation

   The risk score is calculated by multiplying the probability of an event by its impact.

2. Step 2: Evaluate each formula

   Addition, subtraction, or division do not correctly represent risk score calculation.

3. Final Answer:

   Risk score = Probability x Impact -> Option C

4. Quick Check:

   Risk score uses multiplication [OK]

Hint: Multiply chance and impact for risk score [OK]

Common Mistakes:

• Adding probability and impact instead of multiplying
• Dividing impact by probability
• Subtracting values instead of combining

3. Given a risk with probability 0.3 and impact 8, what is the risk score?

medium

A. 8.3

B. 2.4

C. 0.375

D. 24

Solution

1. Step 1: Identify given values

   Probability = 0.3, Impact = 8.

2. Step 2: Calculate risk score by multiplying

   Risk score = 0.3 x 8 = 2.4.

3. Final Answer:

   2.4 -> Option B

4. Quick Check:

   0.3 x 8 = 2.4 [OK]

Hint: Multiply probability and impact numbers [OK]

Common Mistakes:

• Adding instead of multiplying
• Multiplying in reverse order but miscalculating
• Confusing decimal multiplication

4. A project manager calculates risk score as Probability + Impact instead of Probability x Impact. What is the main error?

medium

A. Using addition instead of multiplication for risk score

B. Ignoring the impact value

C. Using probability as a percentage

D. Calculating risk score twice

Solution

1. Step 1: Identify the calculation mistake

   The manager added probability and impact instead of multiplying them.

2. Step 2: Understand correct risk score formula

   Risk score must be calculated by multiplying probability and impact to reflect combined effect.

3. Final Answer:

   Using addition instead of multiplication for risk score -> Option A

4. Quick Check:

   Risk score = Probability x Impact, not addition [OK]

Hint: Risk score needs multiplication, not addition [OK]

Common Mistakes:

• Adding values instead of multiplying
• Forgetting to include impact
• Misinterpreting probability scale

5. A software project has three risks with these values: Risk A (0.2, 10), Risk B (0.5, 3), Risk C (0.1, 15). Which risk should be prioritized based on risk score?

hard

A. Risk A

B. Risk B

C. Risk C

D. All have equal priority

Solution

1. Step 1: Calculate risk scores for each risk

   Risk A: 0.2 x 10 = 2.0
   Risk B: 0.5 x 3 = 1.5
   Risk C: 0.1 x 15 = 1.5

2. Step 2: Compare risk scores to prioritize

   Risk A has the highest score of 2.0.

3. Final Answer:

   Risk A -> Option A

4. Quick Check:

   Risk A score = 2.0 > others [OK]

Hint: Pick risk with highest score [OK]

Common Mistakes:

• Choosing risk with highest probability only
• Choosing risk with highest impact only
• Assuming all risks have equal priority