Here is a guide to available resources, both on-line URLs and books and magazines, with notes as to the circumstances under which each could be useful. This is an eclectic collection, with varying degrees of utility for the practicing professional, but hopefully all have some use.
Risk Management Guide for DoD Acquisitions published by the Defense Systems Management College Press, March 1998, http://www.dsmc.dsm.mil/pubs/gdbks/risk_management.htm - This guide is written for DoD program managers. It is very detailed to cover large, complex programs like an aircraft carrier. Non-military programs can tailor their risk management programs by deleting or down-scoping various directions of the guide.
Managing Risk: Methods for Software Systems Development, Elaine Hall, Addison Wesley Longman Inc. 1998 - While Dr. Hall's book is intended for software risk management, it is comprehensive and complete enough to be useful to a much wider audience.
Managing the Risks of Organizational Accidents, James Reason, Ashgate Publishing Limited, 1997 - This book deals with the organizational problems that lead to disaster. He defined a set of requirements for a safe culture.
Handbook for Decision Analysis, prepared by Scott Barclay et al, Defense Advance Research Project Agency, U.S. Department of Defense, Technical Report TR-77-6-30, 1977 and "Fuzzy Decision Analysis," IEEE Transactions on Systems, Man, and Cybernetics, Vol. SMC-9, No.1 (January 1979) are an interesting pair. The DARPA handbook presents Decision Analysis using varying aspects of a scenario in which the reader is the captain of a warship on combat duty offshore of a hostile nation. The ship's radar has detected an approaching unidentified aircraft. The aircraft could be hostile, intending to bomb the warship, or it could be a damaged friendly aircraft attempting to get close to the warship so the pilot could eject and be rescued. The Handbook illustrates how decision analysis can be used by the captain to decide whether to shoot the plane down or not. "Fuzzy Decision Analysis" shows how "fuzzy" logic can be used on the same scenario.
Theory of Games and Economic Behavior, John von Neumann and Oskar Morganstern, Princeton University Press, Princeton, NJ, 1980 - This is one of the seminal texts of Utility Theory.
Carnegie-Mellon University, Software Engineer Institute, "Software Acquisition - Capability Maturity Model"
http://www.sei.cmu.edu/arm/SA-CMM.html
Insurance for the Information Technology Sector
http://www.itaa.org/usfg.html
U.S. Department of the Interior, Bureau of Reclamation, Decision Process Guidebook
http://www.usbr.gov/Decision-Process/toolbox/toollist.htm
Best Manufacturing Practices Center of Excellence
http://www.bmpcoe.org (and then search on "risk" -- this shows several companies' Best Practices with regard to risk management)
Risk and Insurance Management Society - Risk Management Magazine
http://www.rims.org/
Risk Management/Insurance Information System Website
http://www.rmisweb.com/
American Risk and Insurance Association Website
http://www.aria.org/
Public Risk Management Association
http://www.primacentral.org/
http://www.solutionsforisk.com/
"The Society for Risk Analysis (SRA) provides an open forum for all those who are interested in risk analysis. Risk analysis is broadly defined to include risk assessment, risk characterization, risk communication, risk management, and policy relating to risk. Our interests include risks to human health and the environment, both built and natural. We consider threats from physical, chemical, and biological agents and from a variety of human activities as well as natural events. We analyze risks of concern to individuals, to public and private sector organizations, and to society at various geographic scales. Our membership is multidisciplinary and international." - SRA Homepage
http://www.sra.org/
National Underwriter Company
http://www.nuco.com/
Carnagie Mellon University, Software Engineering Institute, "Team Risk Management: A New Model for Customer-Supplier Relationships," (CMU/SEI-94-SR-005)
http://direct.asset.com/wsrd/product.asp?pf_id=ASSET%5FA%5F1631
Godcharles Goulet Fournier Consulting, Inc. - Technology Management, Enterprize Risk Management, and Partnership Management related to Technology Investments
http://www.ggf.ca
RiskList - Resources for the Risk Manager
http://home.clara.net/rlowther/risklist.html
Target Risk, Dealing with the danger of death, disease, and damage in everyday decisions by Gerald J.S. Wilde
http://pavlov.psyc.queensu.ca/target/
http://khht.com/huber/pha/pha.html
Practical Risk Management, the Risk Professionals' Handbook
http://www.pracrisk.com/
RiskINFO - Resources for Risk Management, Safety, and Insurance Professionals
http://www.riskinfo.com
"The Global Risk Management Network, the online information service from International Risk Management and The Review - Worldwide Reinsurance magazines. The Network provides news, views, and information for risk, insurance, and reinsurance professionals, updated each working day." - GRMN Homepage
http://www.grmn.com/pages/default.asp
R.S Pressman & Associates, Inc. has a lisk of project management and software engineering books, tools, and links that cover risk.
http://www.rspa.com/spi/riskanyl.html
Nonprofit Risk Management Center provide risk control assistance to nonprofit agencies.
http://www.nonprofitrisk.org
Links to other Bibliographies:
Edward Dean of NASA's Risk Bibliography
Edward Dean of NASA's Project Risk Bibliography
The RISKDRIVER Website - This Website seems to have contributions from European Information Technology (IT) improvement groups.
http://www.riskdriver.com
This contains a catalog of typical software development risks and known ways of addressing them:
http://members.aol.com/acockburn/riskcata/riskbook.htm