Risk management in software quality assurance