[ABSTRAK
PT. XYZ sebagai salah satu perusahaan penyedia layanan TI mengandalkan penggunaan perangkat lunak untuk dapat menunjang dan meningkatkan bisnisnya. Hal ini menyebabkan permintaan terhadap penyediaan perangkat lunak dalam bentuk proyek TI semakin meningkat. Proyek TI tersebut dituntut agar dapat memenuhi tujuan utama diadakannya proyek tersebut serta memuaskan pelanggan atau sponsor proyek. Namun saat ini, tingkat keberhasilan proyek TI di PT. XYZ masih rendah dikarenakan proses manajemen risiko yang belum berjalan dengan baik pada saat siklus pengembangan perangkat lunak.Penelitian ini bertujuan untuk menghasilkan rekomendasi kontrol risiko pada siklus pengembangan perangkat lunak yang dapat digunakan oleh PT. XYZ. Penyusunan kontrol risiko pada siklus pengembangan perangkat lunak dilakukan dengan menggunakan kerangka kerja OCTAVE Allegro yang sudah disesuaikan. Data primer yang digunakan dalam penelitian ini dikumpulkan melalui wawancara dan observasi langsung. Data sekunder didapatkan dari studi dokumen organisasi dan studi literatur terkait dengan penelitian yang relevan.Hasil penelitian ini diharapkan dapat menyelesaikan permasalahan yang dihadapi oleh PT. XYZ dengan memberikan rekomendasi kontrol risiko pada siklus pengembangan perangkat lunak.;

---

ABSTRACT
PT. XYZ as one of the IT service providers rely on the use of software to be able to support and improve business. This means that demand for the provision of software in the form of IT projects is increasing. IT projects are required in order to fulfill the main objective of the project as well as the holding of satisfying the customer or project sponsor. However, the success rate of IT projects in PT. XYZ is still low due to the risk management process has not gone well during the software development life cycle.This research aims to produce a recommendations risk control in the software development life cycle that can be used by PT. XYZ. Preparation of risk control in the software development life cycle risk management policy is done by using the OCTAVE Allegro framework that has been adjusted. The primary data used in this study were collected through interviews and direct observation. Secondary data were obtained from the study of organizational documents and studies related to the research literature relevant.The results of this study are expected to resolve the problems faced by PT. XYZ to provide a recommendations risk control in the software development life cycle., PT. XYZ as one of the IT service providers rely on the use of software to be able to support and improve business. This means that demand for the provision of software in the form of IT projects is increasing. IT projects are required in order to fulfill the main objective of the project as well as the holding of satisfying the customer or project sponsor. However, the success rate of IT projects in PT. XYZ is still low due to the risk management process has not gone well during the software development life cycle.This research aims to produce a recommendations risk control in the software development life cycle that can be used by PT. XYZ. Preparation of risk control in the software development life cycle risk management policy is done by using the OCTAVE Allegro framework that has been adjusted. The primary data used in this study were collected through interviews and direct observation. Secondary data were obtained from the study of organizational documents and studies related to the research literature relevant.The results of this study are expected to resolve the problems faced by PT. XYZ to provide a recommendations risk control in the software development life cycle.]