June 2008

Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30          
Blog powered by TypePad

October 29, 2007

A Picture of Denial

28threat.600.jpg Paul Kedrosky posted this picture of new house construction seen through the branches of a tree blackened by the 2003 California wildfires. I can't top that for a picture of denial.

-jsq

He says he got it from the NY Times, but there's no link, so I can't attribute it further.

August 27, 2007

Outrage at Outrage Management

outrage.png
management.png

So we were discussing Peter Sandman's recommendations for outrage management, which mostly have to do with how to deal with management not doing something that you've given them rational reasons to do, because of some emotional resistance or other. The opposite problem also occurs: they believe you; they just don't care. Then you could use some outrage.

Alex brings up two good points in the previous comments:

I'm afraid that outside of usefulness in those communications channels, I just would hesitate to use the term "Outrage". For example, creating "Outrage" metrics sounds like you're working in hollywood publicity for Paris Hilton, not protecting business assets. :)

Yes, exactly, it's usefulness in these communications channels, that is, with management, that emotion, up to and including outrage, has to be used and managed.

Continue reading "Outrage at Outrage Management" »

August 22, 2007

Outrage: Less and More

danrather0207.jpg We've been discussing Outrage Considered Useful. Alex remarked in a comment:

The term "Outrage" suggests that risk cannot or should not be discussed in a rational manner.

What I think Sandman is getting at is that often risk isn't discussed in a rational manner, because managers' (and security people's) egos, fears, ambitions, etc. get in the way. In a perfect Platonic world perhaps things wouldn't be that way, but in this one, people don't operate by reason alone, even when  they think they are doing so.

Outrage x Hazard may be a means to express risk within the context of the organization, but I like probability of loss event x probable magnitude of loss better for quantitative analysis.

Indeed, quantitative analysis is good. However, once you've got that analysis, you still have to sell it to management. And there's the rub: that last part is going to require dealing with emotion.

Continue reading "Outrage: Less and More" »

My Photo

Risk Reading