Tom DeMarco Tim Lister Risk Management during Requirements. 99-101 2003 20 IEEE Software 5 http://csdl.computer.org/comp/mags/so/2003/05/s5099abs.htm db/journals/software/software20.html#DeMarcoL03