Hallo Zeuge,
From my experience, programming and development of software should be conducted by programmers with the aid of the risk managers themselves. However, you'll quite often find your department on a tight budget and not permissive in getting the right kind of tools to quantitatively...