A real-time risk assessment and mitigation engine based on dynamic context

Abstract

Today, the risk of a service related change is typically assessed at change record creation time by a Change Requester either manually or through answering a fixed set of questions. Assessing the risk of a change, thus, relies heavily on one person's opinion. Further, in the questionnaire method, a fixed set of questions implies that the change context is assumed to be the same regardless of the type of change being raised, whereas in practice, no two changes are truly identical. Such deficiencies of the standard practice to assess risk of a change may, thus, result in inaccurate assessment, which can lead to unmitigated risks, ultimately materializing as failures. We present a novel Risk Engine, which takes into account a rich, dynamic change context to calculate and mitigate the risk of a service related change in real-time with increased accuracy and reliability. We describe the recipe for creating the Risk Engine along with several user studies we have conducted to justify our design choices at each step. Our initial pilot results reveal that it is possible to drive the number of change failures down significantly using our novel Risk Engine. © 2011 IEEE.