Abstract / scope
ISO/IEC 16085:2004 defines a process for the management of risk during software acquisition, supply, development, operations and maintenance. It is intended that both technical and managerial personnel throughout an organization apply ISO/IEC 16085:2004.