Technology risk calculation Assess the technology risks of your business applications by calculating their risks first at the software model level and then at the business application level. Calculating technology risk at the software model level Figure 1. An illustration to show the calculation of technology risk at software model level Risk for the software model level is calculated based on two parameters such as lifecycle stage and ageing. The number of months in calculating ageing must be configurable. Lifecycle stage: Internal and External The range set for a risk value at each level such as very high, high, moderate, low, and none vary from one organization to another. You can set the risk value for each lifecycle phase based on your organizational requirements. Use the software model lifecycle form to associate the lifecycle phase for each software model with a risk. Based on the selected risk the parameter risk is determined. The risk values in the lifecycle table are very high, high, moderate, low, and none. Accordingly the risk is also very high, high, moderate, low, or none. Ageing: Internal and External Similarly, the ageing internal and external has the following risk values: 0 to 90 days is high risk 90 to 180 days is moderate risk more than 180 days is low risk Based on the lifecycle internal and external stages and the ageing internal and external stages, the risk of the software model is calculated as follows: If there is a single High risk, then the risk of the software model is High. If there is a single Moderate risk, then the risk of the software model is Moderate. The risk of the software model is Low only if the risk of all the underlying components are Low. Note: After calculating the risk at the software model, the risk at the business service level (based on the risks of all the underlying software models) is calculated. Then, the risk at the business application level (based on the risk of the production instances which are nothing but production business service) is calculated. Calculating technology risk at the business application level A business application can run on many software models. The risk of a business application due to its underlying software models is derived from the risk of the individual software models. Figure 2. Calculating risk at the business application level If one of the software models is at High risk, then the business application is at High risk. If one of the software models is at Medium risk, then the business application is at Medium risk. The risk of the business application is Low only if all the underlying software models have a Low risk.