According to a Standish Group report, corporations in the United States spend over $275 billion every year on software development projects, many of which are doomed to failure. Research by the group found that over 80% of projects fail for various reasons, and that fully 30% of project swere cancelled prior to completion because of poor execution.
David B. Stewart, at the University of Maryland, set out to document the 10 most common mistakes of software development. He found, however,that the sheer number of errors that were commonly practiced made it impossible to keep the number to ten. He ended up calling his article “Twenty-Five Most Common Mistakes with Real-Time Software Development.” Even so, after the title had been established, he found another five errors so common tha the felt compelled to add them.
According to Dr. Michael Stovsky, of Stovsky and Associates, the most common project problems are due to failure to manage project elements successfully:
· Requirements are not clearly and accurately defined, and agreed upon by all concerned.
· Resources are not adequately planned and allocated.
· Threats to project success are not clearly detected, identified, and protected against.
· Critical path analysis is omitted, or poorly executed.
· The project’s progress is not tracked adequately.
· Quality management is not carried out well enough throughout the life of the project.
· Too little data is collected, or data is ignored or poorly understood.
Correcting flaws identified during software security audits is expensive and time consuming. Worse, vast resources are spent on containing and recovering from exploits. Fortunately, providing development staff with the knowledge and tools to avoid many of these pitfalls is easy and inexpensive.