events will directly affect business goals. This activity includes analyses
of software and development artifacts.
3. Synthesizing and ranking the risks.
4. Defining a cost-effective risk mitigation strategy.