Software risk management: principles and practices - Boehm, BW (IEEE Software, 1991)