Reflecting on my first audit study – we found things many would expect (image 1), like audits largely focusing on administrative items, and superficial matters. And for my construction friends, we found ‘toolboxes’ used a lot to address an issue, even if that issue didn’t have any reasonable connection to something that you’d need to… Continue reading Safety audits almost never target the actual sources of operational danger
Tag: fantasy-planning
Quantitative Risk Assessments as Enabling Devices in Cybersecurity
Oof, a real banger Master’s from Colette Alexander, exploring the role of Quantitative Risk Assessments (QRA) as fantasy documents and enabling devices in cybersecurity. Can’t do this justice, so just a few extracts: “Even though it is often touted as a value of producing QRA, organizational learning was not an objective for any of the… Continue reading Quantitative Risk Assessments as Enabling Devices in Cybersecurity
