release); and improve internal software development processes so that
they in turn better manage software risks.
According to McGraw, typical risk metrics include, but are not limited to,
risk likelihood, risk impact, risk severity, and the number of risks that emerge