Many, many years ago I held the pager for my company. This was long before cloud computing, long before devops, and long before infrastructure as code. Mostly the pager fired … Continue reading Learning by doing… in rehearsal

Most people think of risk management as stopping bad things from happening. But ideally it’s really uncertainty management. That does cover reducing the chances of bad things happening, but it … Continue reading Risk management – helping good things happen

Last week I wrote about how traditional risk “scoring” doesn’t translate easily to the way probability is best described, which is a probability density curve. Those are things like bell … Continue reading A different way to score risk

A couple of weeks ago I said that, although I think it’s a mistake to “score” risk events in terms of simple likelihood and impact, it’s not entirely devoid of … Continue reading Translating risk scoring into probability density distributions

A long while ago I spent a fair bit of time looking at “risks” on a risk list. There was a long list of “things that might go wrong”, and … Continue reading Two things about likelihood times impact in risk

I’ve long been bothered by the concept of “risk appetite”. It’s always seemed one of those things that is both intellectually alluring and impossible to grasp practically. But recently I … Continue reading A simple numerical view of risk appetite