Point Lookout: a free weekly publication of Chaco Canyon Consulting
Volume 17, Issue 44;   November 1, 2017: Risk Creep: I

Risk Creep: I

by

Last updated: August 8, 2018

Risk creep is a term that describes the insidious and unrecognized increase in risk that occurs despite our every effort to mitigate risk or avoid it altogether. What are the dominant sources of risk creep?
Terminal 3 of Beijing Capital International Airport

Terminal 3 of Beijing Capital International Airport. An extraordinary number of processes must work with precision for an airline to operate "within normal parameters" for a single day. Aircraft, fuel, seating assignments, luggage, flight crew, security, and on and on. That they do as well as they do is worthy of admiration.

Early in the morning on May 27, one of Britain's busiest annual travel days, British Airways canceled all flights from London's two biggest airports. More than 1,000 flights and 75,000 passengers were affected. In a statement, the airline announced that "a major IT system failure" had disrupted flight operations worldwide [Johnston 2017][Dans 2017].

On September 28 "network problems" struck the firm Amadeus IT Group SA, whose Altea software "is used by more than 100 airlines worldwide," including "Air France, Southwest, Lufthansa, British Airways, Qantas, China Air and Korean Air" [Rizzo 2017]. Passengers around the world reported long lines, and although the system did recover that same day, delays of hours were widespread, and many international passengers missed connections.

On that same day, in the midst of worldwide air traffic disruption, Reuters reported that the United States General Accounting Office would be investigating these disruptions and a string of others that had occurred in the previous six months [Shepardson 2017]. Fires, network outages, human error, and goodness knows what else were suspected causes.

Clearly something was not right with the airlines' management of technological risk. And since no major industry understands technological risk management better than the airlines, it's reasonable to suppose that if the airline industry is having trouble managing technological risk, just about everyone is.

However assiduously we avoid risk, we sometimes find — suddenly, as the airlines did — that we're up to our necks in it. How does this happen? How does risk creep into our projects and our operations? Let's consider projects, because they're time-limited and therefore a little less complicated.

When project champions are required to "sell" When project champions are
required to "sell" a project
internally, they sometimes overcommit
a project internally, they sometimes overcommit. If that happens because of an inordinately high bar imposed by senior management, one possible cause is a most curious phenomenon, related to what Boehm et al. call a "conspiracy of optimism" [Boehm 2016], and which is actually a variant of the n-person prisoner's dilemma [Hamburger 1973]. Specifically, senior management might be trying to manage enterprise-scale risk by requiring high returns at low risk from individual projects (or even individual portfolios of projects). Ironically, this approach results in risk elevation for the individual projects or portfolios, because project champions must promise the nearly impossible, or the outright impossible, to gain access to resources. The paradoxical result is that risk aversion on the part of senior management fosters an environment in which nearly all activities that are underway are high risk. By attempting to wring risk out of the enterprise, management opens the door and invites it in.

It gets worse. It turns out that the risks confronting individual projects, arising from the unrealistic promises of project champions, are correlated. And that means that when one risk event materializes, others will too. We'll explore how project champions contribute to risk creep next time. Go to top Top  Next issue: Risk Creep: II  Next Issue

52 Tips for Leaders of Project-Oriented OrganizationsAre your projects always (or almost always) late and over budget? Are your project teams plagued by turnover, burnout, and high defect rates? Turn your culture around. Read 52 Tips for Leaders of Project-Oriented Organizations, filled with tips and techniques for organizational leaders. Order Now!

Footnotes

[Johnston 2017]
Chris Johnston. "British Airways cancels all flights from Gatwick and Heathrow due to IT failure," The Guardian, May 27, 2017, available at c4i.co/36m, retrieved: October 15, 2017. Back
[Dans 2017]
Enrique Dans. "What Is Technical Debt, and Why Is British Airways Up to Its Neck In It?" Medium.com blog, available at c4i.co/36l, retrieved October 15, 2017. Back
[Rizzo 2017]
Cailey Rizzo. "System Outage Causes Delays and Confusion at Airports Around the World," Travel and Leisure, September 28, 2017, available at c4i.co/36n, retrieved October 16, 2017. Back
[Shepardson 2017]
David Shepardson. "U.S. government auditor to look into airline IT disruptions: letter," Reuters, September 28, 2017, available at c4i.co/36o, retrieved October 15, 2017 Back
[Boehm 2016]
Barry Boehm, Celia Chen, Kamonphop Srisopha, Reem Alfayez, and Lin Shiy. "Avoiding Non-Technical Sources of Software Maintenance Technical Debt," Course notes for Software Engineering I, USC School of Engineering, Fall 2016. Back
[Hamburger 1973]
H. Hamburger. "N-person Prisoner's Dilemma," Journal of Mathematical Sociology, 3 pp. 27-48, 1973. Back

Your comments are welcome

Would you like to see your comments posted here? rbrenyDOhiKbrJDAJJNyXner@ChacMTZTFJBxfRVYLjQcoCanyon.comSend me your comments by email, or by Web form.

About Point Lookout

Thank you for reading this article. I hope you enjoyed it and found it useful, and that you'll consider recommending it to a friend.

Point Lookout is a free weekly email newsletter. Browse the archive of past issues. Subscribe for free.

Support Point Lookout by joining the Friends of Point Lookout, as an individual or as an organization.

Do you face a complex interpersonal situation? Send it in, anonymously if you like, and I'll give you my two cents.

Related articles

More articles on Project Management:

Two U.S. Army soldiers use binoculars and a riflescope to watch for insurgentsScheduling as Risk Management
When we schedule a complex project, we balance logical order, resource constraints, and even politics. Here are some techniques for using scheduling to manage risk and reduce costs.
Example of an unsecured driver-side floor mat trapping the accelerator pedal in a 2007 Toyota Lexus ES350Risk Management Risk: I
Risk Management Risk is the risk that a particular risk management plan is deficient. It's often overlooked, and therefore often unmitigated. We can reduce this risk by applying some simple procedures.
Congestion on a U.S. highwayNonlinear Work: When Superposition Fails
Much of the work we do is confounding, because we consistently underestimate the effort involved, the resources required, and the time required to get it done. The failure of superposition can be one reason why we get it wrong.
A visual illusionScope Creep and the Planning Fallacy
Much is known about scope creep, but it nevertheless occurs with such alarming frequency that in some organizations, it's a certainty. Perhaps what keeps us from controlling it better is that its causes can't be addressed with management methodology. Its causes might be, in part, psychological.
The damaged Apollo 13 Service Module, as seen from the command moduleOn the Risk of Undetected Issues: I
In complex projects, things might have gone wrong long before we notice them. Noticing them as early as possible — and addressing them — is almost always advantageous. How can we reduce the incidence of undetected issues?

See also Project Management and Personal, Team, and Organizational Effectiveness for more related articles.

Forthcoming issues of Point Lookout

Two men whispering at a village festivalComing January 23: Judging Others
Being "judgmental" is a stance most people recognize as transgressing beyond widely accepted social norms. But what's the harm in judging others? And why do so many people do it so often? Available here and by RSS on January 23.
Bottom: Aerial view of the Forth Bridge, Edinburgh, Scotland. Top: Inside the Forth Rail Bridge, from a ScotRail 158 on August 22, 1999.And on January 30: Conway's Law and Technical Debt
Conway's Law is an observation that the structures of systems we design tend to replicate our communication patterns. This tendency might also contribute to their tendency to accumulate what we now call technical debt. Available here and by RSS on January 30.

Coaching services

I offer email and telephone coaching at both corporate and individual rates. Contact Rick for details at rbrenaoEjFIXuoZUfdBsxner@ChacIgWAKaZGZYKMCnMaoCanyon.com or (650) 787-6475, or toll-free in the continental US at (866) 378-5470.

Get the ebook!

Past issues of Point Lookout are available in six ebooks:

Reprinting this article

Are you a writer, editor or publisher on deadline? Are you looking for an article that will get people talking and get compliments flying your way? You can have 500 words in your inbox in one hour. License any article from this Web site. More info

Public seminars

The Power Affect: How We Express Our Personal Power
Many The Power Affect: How We Express Personal Powerpeople who possess real organizational power have a characteristic demeanor. It's the way they project their presence. I call this the power affect. Some people — call them power pretenders — adopt the power affect well before they attain significant organizational power. Unfortunately for their colleagues, and for their organizations, power pretenders can attain organizational power out of proportion to their merit or abilities. Understanding the power affect is therefore important for anyone who aims to attain power, or anyone who works with power pretenders. Read more about this program. Here's a date for this program:

The Power Affect: How We Express Our Personal Power
Many The Power Affect: How We Express Personal Powerpeople who possess real organizational power have a characteristic demeanor. It's the way they project their presence. I call this the power affect. Some people — call them power pretenders — adopt the power affect well before they attain significant organizational power. Unfortunately for their colleagues, and for their organizations, power pretenders can attain organizational power out of proportion to their merit or abilities. Understanding the power affect is therefore important for anyone who aims to attain power, or anyone who works with power pretenders. Read more about this program. Here's a date for this program:

Follow Rick

Send email or subscribe to one of my newsletters Follow me at LinkedIn Follow me at Twitter, or share a tweet Follow me at Google+ or share a post Subscribe to RSS feeds Subscribe to RSS feeds
The message of Point Lookout is unique. Help get the message out. Please donate to help keep Point Lookout available for free to everyone.
Technical Debt for Policymakers BlogMy blog, Technical Debt for Policymakers, offers resources, insights, and conversations of interest to policymakers who are concerned with managing technical debt within their organizations. Get the millstone of technical debt off the neck of your organization!
Go For It: Sometimes It's Easier If You RunBad boss, long commute, troubling ethical questions, hateful colleague? Learn what we can do when we love the work but not the job.
303 Tips for Virtual and Global TeamsLearn how to make your virtual global team sing.
101 Tips for Managing ChangeAre you managing a change effort that faces rampant cynicism, passive non-cooperation, or maybe even outright revolt?
101 Tips for Effective MeetingsLearn how to make meetings more productive — and more rare.
Exchange your "personal trade secrets" — the tips, tricks and techniques that make you an ace — with other aces, anonymously. Visit the Library of Personal Trade Secrets.