System and method for calculating software certification risks

• US 20090319980A1
• Filed: 06/19/2008
• Published: 12/24/2009
• Est. Priority Date: 06/19/2008
• Status: Active Grant

• Current Assignee: Caterpillar Incorporated
• Original Assignee: Caterpillar Incorporated
• Inventors: Streitmatter, Scott William, Howell, Bruce Gehlbach, Wilson, Nathan Lee, Bellrose, Frank Chapman, Kaniecki, Stanley Russell
• Granted Patent: US 8,255,881 B2
• Time in Patent Office: Days
• US Class Current: 717/100
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 40/08 Insurance

Abstract

A method for calculating a composite risk is disclosed. The method may include receiving information associated with a plurality of risk factors. The information may include a timeline for each risk factor, and the timeline may include a plurality of discrete time points. The method may further include determining risk values indicative of risk levels of each risk factor associated with the plurality of discrete time points. The method may also include calculating the composite risk using the determined risk values and a relationship between the composite risk and the plurality of risk factors. The composite risk may include a plurality of composite risk values associated with the plurality of discrete time points.

Claims

1. A method for calculating a composite risk, the method comprising:

receiving information associated with a plurality of risk factors, wherein the information includes a timeline for each risk factor, the timeline including a plurality of discrete time points;

determining risk values indicative of risk levels of each risk factor associated with the plurality of discrete time points; and

calculating the composite risk using the determined risk values and a relationship between the composite risk and the plurality of risk factors, wherein the composite risk includes a plurality of composite risk values associated with the plurality of discrete time points.

2. The method of claim 1, further including creating a risk look-up table, including:

collecting inputs regarding the risk values of each risk factor from multiple users;

determining the risk values of each risk factor at the plurality of discrete time points based on the collected user inputs; and

storing the risk values of each risk factor in the risk look-up table, wherein each risk value corresponds to a discrete time point.

3. The method of claim 2, wherein the user inputs are collected using a voice of business (VOB) survey.

4. The method of claim 2, wherein the risk values are determined using a failure mode effects analysis (FMEA).

5. The method of claim 1, further including identifying a time point, among the plurality of discrete time points, that corresponds to a lowest composite risk value.

6. The method of claim 5, further including adjusting the timeline of one or more risk factors, if the identified time point is not within a threshold time range.

7. The method of claim 1, further including:

creating a plot using the calculated composite risk, wherein the plot includes a risk axis and a time axis and the calculated composite risk is displayed as a risk-time curve; and

displaying the plot.

8. The method of claim 1, wherein calculating the composite risk further includes rating the composite risk based on a rating criteria, wherein the rating criteria defines a plurality of risk levels and each risk level corresponds to a range of risk values.

9. The method of claim 1, wherein the composite risk is associated with certifying software, and the plurality of risk factors include software development life-cycle, operating system release, hardware changes and infrastructure changes.

10. The method of claim 9, further including identifying a recommended software certification time, wherein the recommended software certification time corresponds to a lowest composite risk value.

11. The method of claim 10, further including adjusting the timelines of one or more risk factors until the recommended software certification time is within a threshold time range.

12. The method of claim 9, wherein the relationship is defined by R=R_sd×

R_h×

R_i+R_os, wherein R denotes a composite risk value, R_sd denotes a risk value for software development life-cycle, R_h denotes a risk value for hardware change, R_i denotes a risk value for infrastructure change, and R_os denotes a risk value for operating system release.

13. A risk calculator for calculating a composite risk, the risk calculator comprising:

a storage device configured to store information associated with a plurality of risk factors, including;

a timeline for each risk factor, the timeline including a plurality of discrete time points; and

risk values indicative of risk levels of each risk factor associated with the plurality of discrete time points;

a processor coupled to the storage device, and being configured to;

determine risk values indicative of risk levels of each risk factor associated with the plurality of discrete time points; and

calculate the composite risk using the determined risk values and a relationship between the composite risk and the plurality of risk factors, wherein the composite risk includes a plurality of composite risk values associated with the plurality of discrete time points.

14. The risk calculator of claim 13, wherein the processor is further configured to create a plot using the calculated composite risk, wherein the plot includes a risk axis and a time axis and the calculated composite risk is displayed as a risk-time curve.

15. The risk calculator of claim 14, further including a display device coupled to the processor, wherein the display device is configured to display the plot.

16. The risk calculator of claim 13, wherein the processor is further configured to:

collect inputs regarding the risk values of each risk factor from multiple users;

determine the risk values of each risk factor at the plurality of discrete time points based on the collected user inputs; and

store the risk values of each risk factor in a risk look-up table.

17. The risk calculator of claim 13, wherein the risk calculator further includes an input interface configured to receive a threshold time range, and wherein the processor is further configured to:

identify a time point, among the plurality of discrete time points, that corresponds to a lowest composite risk value; and

adjust the timelines of one or more risk factors, if the identified time point is not within the threshold time range.

18. The risk calculator of claim 13, wherein the storage device is further configured to store a rating criteria that defines a plurality of risk levels with each risk level corresponding to a range of risk values, and wherein the processor is further configured to rate the composite risk based on the rating criteria.

19. The risk calculator of claim 13, wherein the composite risk is associated with certifying software, and the plurality of risk factors include software development life-cycle, operating system release, hardware changes and infrastructure changes.

20. A computer readable medium having stored thereon instructions for calculating a composite risk, including instructions to:

receive information associated with a plurality of risk factors, wherein the information includes a timeline for each risk factor, the timeline including a plurality of discrete time points;

determine risk values indicative of risk levels of each risk factor associated with the plurality of discrete time points; and

calculate the composite risk using the determined risk values and a relationship between the composite risk and the plurality of risk factors, wherein the composite risk includes a plurality of composite risk values associated with the plurality of discrete time points.