CAN CSA-ISO IEC 16085-2007 Systems and software engineering - Life cycle processes - Risk management.pdf

1、 Reference numberISO/IEC 16085:2006(E)IEEEStd 16085-2006Systems and software engineering Life cycle processes Risk management Ingnierie des systmes et du logiciel Processus du cycle de vie Gestion des risques International Organization for Standardization (ISO), 2006. All rights reserved. Internatio

2、nal Electrotechnical Commission (IEC), 2006. All rights reserved. NOT FOR RESALE. National Standard of CanadaCAN/CSA-ISO/IEC 16085:07(ISO/IEC 16085:2006)International Standard ISO/IEC 16085:2006 (second edition, 2006-12-15) has been adopted withoutmodification (IDT) as CSA Standard CAN/CSA-ISO/IEC 1

3、6085:07, which has been approved as a NationalStandard of Canada by the Standards Council of Canada.ISBN 978-1-55436-642-2 November 2007Legal Notice for StandardsCanadian Standards Association (CSA) standards are developed through a consensus standards development process approved by theStandards Co

4、uncil of Canada. This process brings together volunteers representing varied viewpoints and interests to achieve consensusand develop a standard. Although CSA administers the process and establishes rules to promote fairness in achieving consensus, it doesnot independently test, evaluate, or verify

5、the content of standards.Disclaimer and exclusion of liabilityThis document is provided without any representations, warranties, or conditions of any kind, express or implied, including, withoutlimitation, implied warranties or conditions concerning this documents fitness for a particular purpose or

6、 use, its merchantability, or itsnon-infringement of any third partys intellectual property rights. CSA does not warrant the accuracy, completeness, or currency of anyof the information published in this document. CSA makes no representations or warranties regarding this documents compliance withany

7、 applicable statute, rule, or regulation.IN NO EVENT SHALL CSA, ITS VOLUNTEERS, MEMBERS, SUBSIDIARIES, OR AFFILIATED COMPANIES, OR THEIR EMPLOYEES,DIRECTORS, OR OFFICERS, BE LIABLE FOR ANY DIRECT, INDIRECT, OR INCIDENTAL DAMAGES, INJURY, LOSS, COSTS, OR EXPENSES,HOWSOEVER CAUSED, INCLUDING BUT NOT L

8、IMITED TO SPECIAL OR CONSEQUENTIAL DAMAGES, LOST REVENUE, BUSINESSINTERRUPTION, LOST OR DAMAGED DATA, OR ANY OTHER COMMERCIAL OR ECONOMIC LOSS, WHETHER BASED IN CONTRACT,TORT (INCLUDING NEGLIGENCE), OR ANY OTHER THEORY OF LIABILITY, ARISING OUT OF OR RESULTING FROM ACCESS TO ORPOSSESSION OR USE OF T

9、HIS DOCUMENT, EVEN IF CSA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, INJURY, LOSS,COSTS, OR EXPENSES.In publishing and making this document available, CSA is not undertaking to render professional or other services for or on behalf of anyperson or entity or to perform any duty owed by any

10、person or entity to another person or entity. The information in this document isdirected to those who have the appropriate degree of experience to use and apply its contents, and CSA accepts no responsibilitywhatsoever arising in any way from any and all use of or reliance on the information contai

11、ned in this document.CSA is a private not-for-profit company that publishes voluntary standards and related documents. CSA has no power, nor does itundertake, to enforce compliance with the contents of the standards or other documents it publishes.Intellectual property rights and ownershipAs between

12、 CSA and the users of this document (whether it be in printed or electronic form), CSA is the owner, or the authorizedlicensee, of all works contained herein that are protected by copyright, all trade-marks (except as otherwise noted to the contrary), andall inventions and trade secrets that may be

13、contained in this document, whether or not such inventions and trade secrets are protectedby patents and applications for patents. Without limitation, the unauthorized use, modification, copying, or disclosure of this documentmay violate laws that protect CSAs and/or others intellectual property and

14、 may give rise to a right in CSA and/or others to seek legalredress for such use, modification, copying, or disclosure. To the extent permitted by licence or by law, CSA reserves all intellectualproperty rights in this document.Patent rightsAttention is drawn to the possibility that some of the elem

15、ents of this standard may be the subject of patent rights. CSA shall not be heldresponsible for identifying any or all such patent rights. Users of this standard are expressly advised that determination of the validity ofany such patent rights is entirely their own responsibility.Authorized use of t

16、his documentThis document is being provided by CSA for informational and non-commercial use only. The user of this document is authorized to doonly the following:If this document is in electronic form:.load this document onto a computer for the sole purpose of reviewing it;.search and browse this do

17、cument; and.print this document.Limited copies of this document in print or paper form may be distributed only to persons who are authorized by CSA to have suchcopies, and only if this Legal Notice appears on each such copy.In addition, users may not and may not permit others to.alter this document

18、in any way or remove this Legal Notice from the attached standard;.sell this document without authorization from CSA; or.make an electronic copy of this document.If you do not agree with any of the terms and conditions contained in this Legal Notice, you may not load or use this document ormake any

19、copies of the contents hereof, and if you do make such copies, you are required to destroy them immediately. Use of thisdocument constitutes your acceptance of the terms and conditions of this Legal Notice.The Canadian Standards Association (CSA),under whose auspices this National Standard hasbeen p

20、roduced, was chartered in 1919 andaccredited by the Standards Council of Canadato the National Standards system in 1973. It is anot-for-profit, nonstatutory, voluntary membershipassociation engaged in standards development andcertification activities.CSA standards reflect a national consensus ofprod

21、ucers and users including manufacturers,consumers, retailers, unions and professionalorganizations, and governmental agencies. Thestandards are used widely by industry and commerceand often adopted by municipal, provincial, andfederal governments in their regulations, particularlyin the fields of he

22、alth, safety, building andconstruction, and the environment.Individuals, companies, and associations acrossCanada indicate their support for CSAs standardsdevelopment by volunteering their time and skillsto CSA Committee work and supporting theAssociations objectives through sustainingmemberships. T

23、he more than 7000 committeevolunteers and the 2000 sustaining membershipstogether form CSAs total membership from whichits Directors are chosen. Sustaining membershipsrepresent a major source of income for CSAsstandards development activities.The Association offers certification and testingservices

24、in support of and as an extension to itsstandards development activities. To ensure theintegrity of its certification process, the Associationregularly and continually audits and inspects productsthat bear the CSA Mark.In addition to its head office and laboratorycomplex in Toronto, CSA has regional

25、 branch officesin major centres across Canada and inspection andtesting agencies in eight countries. Since 1919, theAssociation has developed the necessary expertise tomeet its corporate mission: CSA is an independentservice organization whose mission is to provide anopen and effective forum for act

26、ivities facilitating theexchange of goods and services through the use ofstandards, certification and related services to meetnational and international needs.For further information on CSA services, write toCanadian Standards Association5060 Spectrum Way, Suite 100Mississauga, Ontario, L4W 5N6Canad

27、aThe Standards Council of Canada (SCC) is thecoordinating body of the National StandardsSystem, a coalition of independent, autonomousorganizations working towards the furtherdevelopment and improvement of voluntarystandardization in the national interest.The principal objects of the SCC are to fost

28、erand promote voluntary standardization as a meansof advancing the national economy, benefiting thehealth, safety, and welfare of the public, assistingand protecting the consumer, facilitating domesticand international trade, and furthering internationalcooperation in the field of standards.A Nation

29、al Standard of Canada (NSC) is a standardprepared or reviewed by an accredited StandardsDevelopment Organization (SDO) and approvedby the SCC according to the requirements of CAN-P-2.Approval does not refer to the technical content of thestandard; this remains the continuing responsibility ofthe SDO

30、. An NSC reflects a consensus of a number ofcapable individuals whose collective interests provide,to the greatest practicable extent, a balance ofrepresentation of general interests, producers,regulators, users (including consumers), and otherswith relevant interests, as may be appropriate to thesu

31、bject in hand. It normally is a standard which iscapable of making a significant and timely contributionto the national interest.Those who have a need to apply standards areencouraged to use NSCs. These standards are subjectto periodic review. Users of NSCs are cautionedto obtain the latest edition

32、from the SDO whichpublishes the standard.The responsibility for approving standards asNational Standards of Canada rests with theStandards Council of Canada270 Albert Street, Suite 200Ottawa, Ontario, K1P 6N7CanadaAlthough the intended primary application of this Standard is stated in its Scope, it

33、is importantto note that it remains the responsibility of the users to judge its suitability for their particular purpose.Registered trade-mark of Canadian Standards AssociationCette norme est offerte en anglais seulement pour le moment. La CSA publiera la version enfranais ds quelle sera produite p

34、ar lorganisme rdacteur.Approved byStandards Council of CanadaNational Standard of CanadaPublished in November 2007 by Canadian Standards AssociationA not-for-profit private sector organization5060 Spectrum Way, Suite 100, Mississauga, Ontario, Canada L4W 5N61-800-463-6727 416-747-4044Visit our Onlin

35、e Store at www.ShopCSA.caCAN/CSA-ISO/IEC 16085:07Systems and software engineering Life cycle processes Risk managementPrepared by International Organization for Standardization/ International Electrotechnical CommissionReviewed byCAN/CSA-ISO/IEC 16085:07 Systems and software engineering Life cycle p

36、rocesses Risk managementNovember 2007 Canadian Standards Association CSA/3CAN/CSA-ISO/IEC 16085:07Systems and software engineering Life cycle processes Risk managementCSA PrefaceStandards development within the Information Technology sector is harmonized with international standards development. Thr

37、ough the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Can

38、adian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T).This Standard supersedes CAN/CSA-ISO/IEC 16085:05 (adoption of ISO/IEC 16085:2004). At the time o

39、f publication, ISO/IEC 16085:2006 is available from ISO and IEC in English only. CSA will publish the French version when it becomes available from ISO and IEC.This International Standard was reviewed by the CSA TCIT under the jurisdiction of the Strategic Steering Committee on Information Technolog

40、y and deemed acceptable for use in Canada. From time to time, ISO/IEC may publish addenda, corrigenda, etc. The CSA TCIT will review these documents for approval and publication. For a listing, refer to the CSA Information Products catalogue or CSA Info Update or contact a CSA Sales representative.

41、This Standard has been formally approved, without modification, by the Technical Committee and has been approved as a National Standard of Canada by the Standards Council of Canada.November 2007 Canadian Standards Association 2007All rights reserved. No part of this publication may be reproduced in

42、any form whatsoever without the prior permission of the publisher. ISO/IEC material is reprinted with permission. Where the words “this International Standard” appear in the text, they should be interpreted as “this National Standard of Canada”.Inquiries regarding this National Standard of Canada sh

43、ould be addressed toCanadian Standards Association5060 Spectrum Way, Suite 100, Mississauga, Ontario, Canada L4W 5N61-800-463-6727 416-747-4000www.csa.caTo purchase CSA Standards and related publications, visit CSAs Online Store at www.ShopCSA.ca or call toll-free 1-800-463-6727 or 416-747-4044.Refe

44、rence numberISO/IEC 16085:2006(E)IEEEStd 16085-2006INTERNATIONAL STANDARD ISO/IEC16085IEEEStd 16085-2006Second edition2006-12-15Systems and software engineering Life cycle processes Risk management Ingnierie des systmes et du logiciel Processus du cycle de vie Gestion des risques ISO/IEC 16085:2006(

45、E) IEEE Std 16085-2006 PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In

46、downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in

47、 the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the addr

48、ess given below. ISO Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org ii CAN/CSA-ISO/IEC 16085:07ISO/IEC 16085:2006(E)(Revision ofIEEE Std 1540-2001)Systems and software engineering Life cycle processes Risk management SponsorSoft

49、ware +1 978 750 8400. Permission to photocopy portions ofany individual standard for educational classroom use can also be obtained through the Copyright ClearanceCenter.NOTEAttention is called to the possibility that implementation of this standard may require use of subjectmatter covered by patent rights. By publication of this standard, no position is taken with respect to theexistence or validity of any patent rights in connection therewith. The IEEE shall not be responsible foridentifying patents for which a license