Abstract: In CMMI, risk management is in the third capability maturity level, which is in the same framework with process management. So, the CMMI-based SPRM （software project risk management） can utilize some useful information of software organizations and make t

Key words: Software project, Risk management, CMMI, Risk reduction action