Describe the conventional criteria used in assessing risk in the software-development process.

Like conventional criteria we have

cost

budget and schedule

Explanation:

The conventional criteria regularly are cost, budget and schedule, because these three factors are so important in a company, but we can add other criteria like social, political, and ethical issue.

For example

We create a new social media, all the information about our users, we share or sell this data or if we video content, but this content doesn't have any filter for children, we must evaluate social criteria and ethical criteria.