11.6 Software Risk Aversion Monitoring and Management