4 ms·
Look at the ‘Remediation and Prevention’ section for the fixes. Root cause of an incident is always one, but means to prevent it are multiple.
by notimetorelax 4y ago
Look at the ‘Remediation and Prevention’ section for the fixes. Root cause of an incident is always one, but means to prevent it are multiple.
- fulafel 4y agoRight, but is it the right mental model to demand a root cause to be delivered as the outcome to the investigation, when there are lots of things going wrong and process & architecture problems that make the involved failures fatal.
- notimetorelax 4y agoThis follows Google’s published post mortem template: https://sre.google/sre-book/example-postmortem https://sre.google/sre-book/example-postmortem What you’re saying can go into the lessons learned section.
- fulafel 4y agoThat template is a bit better wrt the cognitive problem in question since the heading is "root causes" (plural). So it doesnt' conflict epistemic idea that failure modes are caused by interacting events and processes. Graph vs tree etc.