ed; * High-risk areas of 1) software process (i.e., critical software development activities) and 2) software product (i.e., critical software modules) are identified. * Temporal, human, computing and other resources are assigned to software engineering activities and product modules, using findings in previous step as an indicator (Thayer, 1988).