Abstract Risk management (RM) plays a key role in project management, as it allows identification and prompt management of threats that may arise during project execution. Furthermore, project management within the software industry is evolving rapidly nowadays, a fact that implies new challenges, because the emergence and use of fresh approaches has brought a greater degree of complexity to the RM process. The objective of this paper is to carry out a systematic literature review (SLR) in the field of software risk, in an attempt to characterize and present the state of the art of this field, identifying gaps and opportunities for further research. From the analysis of the results of this SLR it could be observed that interest on the part of the scientific community has turned away from the definition of research work that addressed an integrated risk management process, to pay attention to work that concentrates on specific activities of this process. It was also possible to see that there is a clear lack of scientific rigour as regards the process of validation in the different studies, and a deficiency in the use of standards or of de facto models to define these.

中文翻译：

---

软件生命周期中的风险管理：系统文献综述

摘要 风险管理 (RM) 在项目管理中起着关键作用，因为它允许识别和及时管理项目执行过程中可能出现的威胁。此外，当今软件行业中的项目管理发展迅速，这一事实意味着新的挑战，因为新方法的出现和使用给 RM 过程带来了更大程度的复杂性。本文的目的是在软件风险领域进行系统的文献综述 (SLR)，试图表征和展示该领域的最新技术，找出进一步研究的差距和机会。从对 SLR 结果的分析可以看出，科学界的兴趣已经从解决综合风险管理过程的研究工作的定义转向关注集中于特定活动的工作这个过程。还可以看到，不同研究中的验证过程明显缺乏科学严谨性，并且在使用标准或事实上的模型来定义这些方面存在缺陷。