Gerenciamento de riscos em projetos de software: uma revisão sistemática da literatura

Abstract

The risk management in software projects plays a crucial role for project managers. Risks, considered as unwanted events, have the potential to threaten the project's success, software quality, and organizational stability. This process is applicable to projects adopting both traditional and agile methodologies since they share common processes. Therefore, the importance of adequate risk management in these methodologies becomes evident, aiming to optimize project success. Conducting a Systematic Literature Review (SLR) in risk management brings significant benefits. It not only identifies existing gaps but also provides a scientific evidence base. Furthermore, synthesizing knowledge from the SLR offers valuable support for decisionmaking, contributing to the reduction or even mitigation of risks involved in the project. The objective of this work is to perform an SLR to consolidate knowledge and practices related to risks in software development projects employing both agile and traditional methodologies. The study aims to identify the types of treatment used and the responses adopted to mitigate these risks. As a result, a list of the main risks and their respective responses was compiled based on the survey. For the execution of this SLR, a well-defined protocol was used, consisting of three phases: 1) the planning phase of the review, involving the definition of the need for the review and research questions, 2) the review's conduction phase, covering the planning of the search strategy, selection, evaluation of studies, and extraction of data from the studies, including data synthesis, and 3) the results reporting phase, where the report is prepared. It is noteworthy that during phase 2, initially, a query to the main databases was performed using a search string, and subsequently, the Snowballing technique was applied to increase the number of selected articles. The conclusions of this work highlight various categories of risks identified in software development projects, emphasizing the lack of a single and comprehensive method for risk management, especially in agile teams of varying sizes.