Experiences in Risk Management
summary
Claims a concrete method: apply the rule of three to identification (effects, causes, controls), description (given when then examples), and test techniques (state transitions, control flow, data combinations). Reject magic numbers and complex Excel matrices; prefer three levels (high/medium/low), use risk poker for quick assessment, and map risk level to test design and test level. Built a visible lean risk Wall of Fame with sticky notes or a digital whiteboard to show where risks start, how testing shifts them, and the trend over time.
AI-written summary · about
chapters (7)
- 0:00Risk management intro
- 3:35Rule of three in risk
- 12:01Risk assessment challenges
- 17:45Three-level risk assessment
- 25:26Risk control strategies
- 29:18Rule of three applied
- 35:36Q&A
related talks
07mIf Development is a Game, How Do I Win?
21mRisk Is Not a Hammer, and Most Hazards Aren't Nails
48mRisk Management: Hindsight is 2020
03mIt starts and ends with you
14mBathtubs, Snakes and WannaCry, Oh My! Risk in the Physical and Cyber World
29mManaging Risk with Psychology Instead of Brute Force
46mBusinesses Run On Risk And Debt: Why Communicating Security Risk Is Hard
34mFearless SREs