6 ms·
This is an interesting approach for information security. A lot better than doing nothing, but the blog post states Netflix has 2 full time engineers thinking j
by rubidium 7y ago
This is an interesting approach for information security. A lot better than doing nothing, but the blog post states Netflix has 2 full time engineers thinking just about risk.
But they’ve kinda just recreated a simplified traditional DFMEA... with some questionable choices on process and math.
Odd that they didn’t reference p/DFMEA or what failures they saw with that approach. Normally you’d model the risk of failure with a weibell curve. The Monte Carlo approach they use is ok but assumes all risks are equally weighted in time for a distribution. You then look at pre-mitigation and post mitigation risk to determine which actions to take.
That said, maybe they’ve never heard of the traditional dfmea process? Unlikely I would hope but possible.
- gfiorav 7y agoWell, they can add the two engineer's annual salary to the cost function as a constant!
- BOOSTERHIDROGEN 7y agodo you have any recommendations on books/references about this dfmea ?
- rubidium 7y agohttps://en.m.wikipedia.org/wiki/Failure_mode_and_effects_analysis https://en.m.wikipedia.org/wiki/Failure_mode_and_effects_ana... Will give you a starting point. But there’s a lot of experienced engineers who know more. It’s something you learn mostly by doing as it needs to be adopted for each project type.
- ozim 7y agoI think that is one of the problems with all risk management area. Everyone is making up their own solution.