In this paper we show the process to perform a formal analysis to identify similarities among models and software engineering standards, adapting the method of similarity between MSSS models. We compared the ISO/IEC 12207 and IEEE 1062 standards, and some of the most important worldwide models such as the CMMI-ACQ, eSCM-CL, PMBOK and PRINCE2. This study focuses on the risk management process from the point of view of software outsourcing. In this paper we present the first phase, which consists of a risk management methodology, to establish the main aspects of risk management for software outsourcing projects. Based on the adaptation of the MSSS, we performed the analysis of the characteristics of the software outsourcing that each standard and method meets, resulting in a series of steps and guidelines to formalize and organize the comparison, and so generate the analysis results.