Boehm, B. W. (1991). Software risk management: Principles and practices. IEEE Software, 8(1):32-41.
Carr, M. J., Konda, S. L., Monarch, I., Ulrich, F. C., and Walker, C. F. (1993). Taxonomy-based risk identification. Technical Report CMU/SEI-93-TR-6, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.
Charette, R. N. (1991). The risks with risk analysis. Communications of the ACM, 34(6):106.
Chittister, C., Kirkpatrick, R., and Van Scoy, R. (1993). Risk management in practice. Technical Review SEI-93-TechReview-004, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.
Fairley, R. (1994). Risk management for software projects. IEEE Software, 11(3):57-67.
Gluch, D. P. (1994). A construct for describing software development risks. Technical Report CMU/SEI-94-TR-14, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.
Higuera, R. P., Gluch, D. P., Dorofee, A. J., Murphy, R. L., Walker, J. A., and Williams, R. C. (1994). An introduction to team risk management (version 1.0). Special Report CMU/SEI-94-SR-1, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.
Sisti, F. J. and Joseph, S. (1994). Software risk evaluation method version 1.0. Technical Report CMU/SEI-94-TR-19, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.
Van Scoy, R. L. (1992). Software development risk: Opportunity, not problem. Technical Report CMU/SEI-92-TR-30, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania 15213, USA.