11.2 Software Risk Management Strategy