Tag Archives: high critical risk management qualitative quantitative Metricon Chandler Howell

High and Critical

Chandler makes many good points about why people avoid dealing with risk management.  My favorite is this one:

  • People still can’t get their head around the idea of probability.
Why is it that they can understand that there’s a 25% chance of rain tomorrow or how much they stand to gain on a $2 ticket if their horse in the third race wins at 11-1, but not that there is a high likelihood that the critical vulnerability they refuse to patch will get worm’ed?

Reasons not to manage risk, by Chandler Howell, Not Bad for a Cubicle, May 15th, 2007

Because they’re getting paid now and they don’t think ahead?

Continue reading