EVOLUTION OF RISK CONCEPTS AND THEIR RELATIONSHIP TO IT PRODUCT QUALITY ASSURANCE

Abstract

The purpose of the study is to identify the relationships between key risk categories in the development of IT products and their quality indicators, with the subsequent development of a generalized risk classification and demonstration of a quantitative impact on software quality metrics. In today's conditions of digital transformation and the increasing complexity of information systems, classical approaches to risk management are losing their effectiveness due to the limited ability to take into account the dynamic interdependencies between risk factors, as well as due to the fragmentation of the analysis of certain types of threats. In this regard, the study focuses on the structural analysis of technical, organizational, and external risks in software development projects, using data from the latest empirical and applied publications.The research methodology is based on a systematic approach using content analysis of scientific sources, formalization of the typology of risks and modeling of their impact on the quality of the IT product. To substantiate the impact of risk categories on the key characteristics of software (reliability, maintainability, performance, etc.), a comparative analysis of the results obtained from peer-reviewed sources was used. Special attention is paid to risk interaction modeling, a multi-agent approach, machine learning for predicting systemic risks, and automated tools for assessing quality changes in the update cycle. The scientific novelty lies in the proposal of a unified three-component classification of risks (technical, organizational, external) as a basis for generalizing and comparing modern approaches to risk management in IT projects. In contrast to existing approaches, the proposed classification allows for the integration of both quantitative and qualitative assessments, and also reflects intercategorical relationships in complex engineering environments. Additionally, a formalized description of the method of constructing a table of comparative impact of risks, based on the transformation of data from empirical studies into percentage metrics of impact on quality, is provided.As a result of the analysis, it was confirmed that technical risks associated with architectural debt, code duplication and instability of changes have a significant impact on the structural and operational quality of the software. Organizational risks manifest themselves in the form of poor communication, ineffective leadership and unstable management. External risks are caused by the influence of the regulatory environment, market fluctuations and foreign policy. The proposed approach allows us to form a comprehensive vision of the structure of risks and their management as an integral part of ensuring the quality of IT products in the full life cycle.