Assessment and Control of Software Risks