Process models make it possible to structure and plan software development by specifying certain steps in a particular order. If an unsuitable process model is selected for software development, the development process and the associated project can be significantly disrupted. Depending on the characteristics of the chosen model and the extent of the development project at hand, important aspects could be neglected or irrelevant aspects over-emphasised. Both issues increase the project management workload and hinder productive work.

Meanwhile, the decision to forgo a process model entirely increases the risk that relevant aspects, especially those relating to information security, will not be considered appropriately during software development. If relevant security functions are then not implemented or tested at all, this may result in developed software that does not meet the security requirements at hand.