diff --git a/docs/ai/Practices/AI-As-Judge.md b/docs/ai/Practices/AI-As-Judge.md index 5f6d9e279..d393de6b6 100644 --- a/docs/ai/Practices/AI-As-Judge.md +++ b/docs/ai/Practices/AI-As-Judge.md @@ -18,6 +18,8 @@ practice: reason: "Can prevent harmful misinformation, disinformation, and deepfakes from spreading by having a second user-owned AI fact-check or block misleading content." - tag: Loss Of Human Control reason: "Can enforce alignment principles by rejecting responses that optimise for harmful proxy goals." + - tag: Unintended Cascading failures + reason: "Introduces a level of redundancy around AI systems, allowing them to sound the alarm when operational parameters are breached." --- diff --git a/docs/ai/Practices/Human-In-The-Loop.md b/docs/ai/Practices/Human-In-The-Loop.md index 90e1b2248..24cdc36e7 100644 --- a/docs/ai/Practices/Human-In-The-Loop.md +++ b/docs/ai/Practices/Human-In-The-Loop.md @@ -13,6 +13,8 @@ practice: reason: "Maintaining consistent human oversight in critical AI systems, ensuring that final decisions or interventions rest with human operators rather than the AI." - tag: Synthetic Intelligence With Malicious Intent reason: See Example of "Centaur" War Teams + - tag: Unintended Cascading failures + reason: "Human oversight of automated systems can help shortcut cascading failure." --- diff --git a/docs/ai/Practices/Multi-Stakeholder-Oversight.md b/docs/ai/Practices/Multi-Stakeholder-Oversight.md index 3b83f128a..64ea678c9 100644 --- a/docs/ai/Practices/Multi-Stakeholder-Oversight.md +++ b/docs/ai/Practices/Multi-Stakeholder-Oversight.md @@ -9,6 +9,8 @@ tags: - AI Practice practice: mitigates: + - tag: Synthetic Intelligence Rivalry + reason: "By involving multiple stakeholders, concentration of the gains from AI can be shared across civilisation, mitigating economic disruption." - tag: Loss Of Diversity reason: "Ensuring that AI governance involves multiple institutions, including governments, researchers, and civil society, to prevent monopolisation." efficacy: Medium diff --git a/docs/ai/Threats/Unintended-Cascading-Failures.md b/docs/ai/Threats/Unintended-Cascading-Failures.md index ee65c22e9..e8c82f616 100644 --- a/docs/ai/Threats/Unintended-Cascading-Failures.md +++ b/docs/ai/Threats/Unintended-Cascading-Failures.md @@ -27,7 +27,7 @@ Unintended cascading effects are a dangerous aspect of AI deployment at scale. - **When Bots Teach Themselves to Trade** [Johnson et al., 2013](https://www.nature.com/articles/s41599-019-0224-3): Examines AI-driven financial crashes caused by autonomous trading systems responding unpredictably to market conditions. -- **Supply Chain Resilience in AI Era** [Sheffi, 2020](https://doi.org/10.1080/00207543.2020.1813767): Explores how automated logistics and AI-based supply chain management can inadvertently amplify disruptions. +- **Supply Chain Resilience in AI Era** [Sheffi, 2020](https://www.youtube.com/live/BkBuNFjLgFg?si=xvNL4hBkT4GCQMYQ): Explores how automated logistics and AI-based supply chain management can inadvertently amplify disruptions. - **AI and Workforce Displacement** [Brynjolfsson & McAfee, 2014](https://doi.org/10.7551/mitpress/9780262029470.001.0001): Investigates the macroeconomic impact of AI-induced job automation and its cascading social consequences. @@ -55,6 +55,8 @@ Unintended cascading effects are a dangerous aspect of AI deployment at scale. - **Real-Life Example:** During the [COVID-19 pandemic](https://doi.org/10.1038/s41599-021-00729-4), automated supply chain optimizations led to stock shortages in essential goods as demand spikes outpaced rigid AI-driven distribution models. +- **The Open Source Software Supply Chain:** Vulnerabilities have led to large-scale cybersecurity incidents. Attacks on widely-used packages (e.g. Log4j, SolarWinds) propagated rapidly through automated update systems, revealing how technical interdependence can cascade into systemic digital risk. + ## Mitigations ### AI System Redundancy diff --git a/docs/books/Risk-First-Second-Edition.md b/docs/books/Risk-First-Second-Edition.md index 7d6edb47c..c5c9f7b05 100644 --- a/docs/books/Risk-First-Second-Edition.md +++ b/docs/books/Risk-First-Second-Edition.md @@ -1,47 +1,61 @@ --- -title: 'Book: Risk-First Second Edition' -description: "Risk-First Software Development Second Edition Coming Soon!" +title: "Risk-First Software Development Second Edition" +description: "Now available in digital format" slug: /Risk-First-Second-Edition -featured: +featured: class: bg1 - element: '' -tags: - - Books -sidebar_position: 2 + element: '' +tags: + - Books +sidebar_position: 1 --- -# Coming in 2024 +I'm pleased to announce that the second edition of Risk-First Software Development is [now available in Beta](https://pragprog.com/titles/rmrfsd/risk-first-software-development-second-edition)! -I'm pleased to announce that the Pragmatic Bookshelf will be publishing a fully-revised and updated second edition of Risk-First Software Development! +[![Risk-First Software Development Second Edition](/img/Cover_Image_Second_Edition.jpg)](https://pragprog.com/titles/rmrfsd/risk-first-software-development-second-edition) -[![Pragmatic Bookshelf](https://media.pragprog.com/images/cms/logos/Bookshelf_4in.png)](https://pragprog.com) - -## Risk-First Software Development Second Edition +## About Risk-First Software Development - Second Edition **Over 20 years ago an "Agile" revolution occurred** in the software development field.  But 20 years later, the very same proponents of the revolution are turning their backs on what they created, arguing that their ideals have been corrupted by zealotry, proscriptive norms, cargo-culting and an "Agile-Industrial Complex" focused on evangelism and certification. -**Risk-First attempts something new:**   to "peel back the onion" and provide a language for understanding and evaluating not just Agile practices but *all practices* in software development.  Unlike the Agile of today, Risk-First is not a methodology telling you what to do, but a toolbox and a pattern language to help you figure out what you should do, and help you communicate with others to make your case. +**Risk-First attempts something new:**   to "peel back the onion" and provide a language for understanding and evaluating not just Agile practices but _all practices_ in software development.  Unlike the Agile of today, Risk-First is not a methodology telling you what to do, but a toolbox and a pattern language to help you figure out what you should do, and help you communicate with others to make your case. + +**Understand How Projects Really Work:** Not all software projects go according to plan: many fail due to overlooked problems, misaligned stakeholders, or rigid methodologies. This book offers a groundbreaking framework for thinking differently by identifying risk at the center of every decision. You’ll gain the vocabulary, tools, and confidence to identify, evaluate, and mitigate risks before they derail your project. + +**All Scales Welcome:** Whether you’re managing a startup product, steering an enterprise system, or trying to incorporate new technologies such as AI, Risk-First helps you get your team aligned, spot trouble before it hits, and build software that delivers. The book aims to develop a **Pattern Language for understanding software risk**, and develop a practical framework for discussing how the activities we take on a project change the balance of the risks we are exposed to. -## How Can I Get Involved? +**Take Control!** Whether you’re a developer, team lead, or CTO, and irrespective of your tech stack or process preference, this book furnishes you with new tools to guide projects to better outcomes. Don’t let risk control you—make it your competitive edge. -### Get Updates +## What's Changed - +This is a hugely updated and revised edition, containing a more thorough catalog of software development risks and a more in depth look at the entire risk process, from the smallest pet project up to the whole enterprise. -If you [Add Your Star on GitHub](https://github.com/risk-first/website) you'll be sent an email invite to join the [Risk-First GitHub Organisation](https://github.com/risk-first/website/discussions) and the associated discussion group! +It contains a fully-revised taxonomy of risks, breaking down each one systematically, giving worked examples of each, a list of common threats and best practices for dealing with each, as well as high-profile examples of where these risks have caused major headaches in real-life. -This is where I will be adding blog materials discussing the content of the new book as it comes together, as well as providing access for beta testers. +It also contains two entirely new chapters dealing with technological change, responding not just to AI but the increasing pace of innovation we see globally. -[![GitHub Star](/img/github_star.png)
☝️ Click This On GitHub ](https://github.com/risk-first/website) +In essence, this is the post-agile, AI-aware manual for understanding and harnessing the forces of innovation in play when developing software systems. + +## Getting Involved + + + +While the book is in beta form, you can purchase it from the link below and read it digitally. Over the course of the beta period, the book will be updated many times with suggestions and improvements - just as with a software beta. + +Once the book is declared "finished", it'll get published proper and you'll get the finalized digital version to keep. + +[Access the Beta Here](https://pragprog.com/titles/rmrfsd/risk-first-software-development-second-edition) -### Pre-Order + + +If you [Add Your Star on GitHub](https://github.com/risk-first/website) you'll be sent an email invite to join the [Risk-First GitHub Organisation](https://github.com/risk-first/website/discussions) and the associated discussion group! -**Coming Soon!** +This is where I will be adding blog materials discussing the content of the new book as it comes together. -### Tell Us What You Think! +[![GitHub Star](/img/github_star.png)
☝️ Click This On GitHub ](https://github.com/risk-first/website) -Most of the material in the second edition book is published here on this website, so you can simply [start reading](overview/Start). If you have any feedback, please get in touch. What's missing? What doesn't make sense? What should be left out? Knowing this will be super-helpful and **you will be credited in the book along with all the other [Contributors](/overview/Contributors).** + diff --git a/docs/books/The-Menagerie.md b/docs/books/The-Menagerie.md index bfbc205ad..d59c8e57d 100644 --- a/docs/books/The-Menagerie.md +++ b/docs/books/The-Menagerie.md @@ -1,23 +1,23 @@ --- -title: 'Book: The Menagerie' +title: "The Menagerie" description: "Risk-First Software Development Volume 1: The Menagerie. Available to read online, on Kindle and to buy at Amazon" slug: /The-Menagerie -tags: - - Books +tags: + - Books -featured: +featured: class: bg1 element: '' -sidebar_position: 1 +sidebar_position: 2 --- # The Menagerie -[Second Edition Coming Soon!](Risk-First-Second-Edition) +[Second Edition Now Available!](Risk-First-Second-Edition) -The software development world is crowded with different practices, metrics, methodologies, tools and techniques. But what unites them all? +The software development world is crowded with different practices, metrics, methodologies, tools and techniques. But what unites them all? -Volume one of the Risk-First series argues the case for viewing _all_ of the activities on a software project through the lens of _managing risk_. It introduces the menagerie of different risks you're likely to meet on a software project, naming and classifying them so that we can try to understand them better. +Volume one of the Risk-First series argues the case for viewing _all_ of the activities on a software project through the lens of _managing risk_. It introduces the menagerie of different risks you're likely to meet on a software project, naming and classifying them so that we can try to understand them better. ![Risk-First Software Development: Volume 1, The Menagerie](/img/Cover_Book_image.jpg) @@ -28,7 +28,7 @@ The book aims to develop a _Pattern Language_ for understanding software risk, a - [Download a Sample](/the-menagerie-sample.pdf) - [Kindle Edition](https://a.co/d/hmpmYl2) (From Amazon) - [Print Edition](https://www.amazon.com/Risk-First-Software-Development-1-Menagerie/dp/1717491855) (From Amazon.com -) or [Amazon UK](https://amzn.eu/d/2i8sZH9) + ) or [Amazon UK](https://amzn.eu/d/2i8sZH9) ## Read It Here diff --git a/docusaurus.config.js b/docusaurus.config.js index 3692f2e86..09c244185 100644 --- a/docusaurus.config.js +++ b/docusaurus.config.js @@ -8,17 +8,17 @@ import { themes as prismThemes } from 'prism-react-renderer'; import remarkMath from 'remark-math'; import rehypeKatex from 'rehype-katex'; -const navLinks = [ { to: '/overview/Start', label: 'Overview', position: 'left' }, - { to: '/thinking/Start', label: 'Thinking', position: 'left' }, - { to: '/risks/Start', label: 'Risks', position: 'left' }, - { to: '/practices/Start', label: 'Practices', position: 'left' }, - { to: '/methods/Start', label: 'Methods', position: 'left' }, - { to: '/books/Start', label: 'Books', position: 'left' }, - { to: '/bets/Start', label: 'Bets', position: 'left' }, - { to: '/estimating/Start', label: 'Estimating', position: 'left' }, - { to: '/presentations/Start', label: 'Presentations', position: 'left' }, - { to: '/ai/Start', label: 'AI', position: 'left' }, - ] +const navLinks = [{ to: '/overview/Start', label: 'Overview', position: 'left' }, +{ to: '/thinking/Start', label: 'Thinking', position: 'left' }, +{ to: '/risks/Start', label: 'Risks', position: 'left' }, +{ to: '/practices/Start', label: 'Practices', position: 'left' }, +{ to: '/methods/Start', label: 'Methods', position: 'left' }, +{ to: '/books/Start', label: 'Books', position: 'left' }, +{ to: '/bets/Start', label: 'Bets', position: 'left' }, +{ to: '/estimating/Start', label: 'Estimating', position: 'left' }, +{ to: '/presentations/Start', label: 'Presentations', position: 'left' }, +{ to: '/ai/Start', label: 'AI', position: 'left' }, +] /** @type {import('@docusaurus/types').Config} */ const config = { @@ -78,14 +78,14 @@ const config = { themeConfig: /** @type {import('@docusaurus/preset-classic').ThemeConfig} */ ({ - announcementBar: { - id: 'support_us', - content: - 'Risk-First Software Development Second Edition - Coming Soon! Click here for details', - backgroundColor: 'rgb(245, 62,121)', - textColor: '#ffffff', - isCloseable: true, - }, + announcementBar: { + id: 'support_us', + content: + 'Risk-First Software Development Second Edition - Available Now! Click here for details', + backgroundColor: 'rgb(245, 62,121)', + textColor: '#ffffff', + isCloseable: true, + }, image: 'img/generated/titles/index.png', metadata: [ { name: 'msvalidate.01', content: "3D19A6D7C17D82567867CF4238511ED1" } diff --git a/src/images/generated/coso/communication.adl b/src/images/generated/coso/communication.adl new file mode 100644 index 000000000..9974882c6 --- /dev/null +++ b/src/images/generated/coso/communication.adl @@ -0,0 +1,39 @@ + + + + + + + COSO Action + + + + Informing and Communicating + + + + + Software Development + + + + + Marketing + Stakeholder Management + + + Issue Management + Meetings + + + Documentation + Demos + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/control-activities.adl b/src/images/generated/coso/control-activities.adl new file mode 100644 index 000000000..11cbd325c --- /dev/null +++ b/src/images/generated/coso/control-activities.adl @@ -0,0 +1,38 @@ + + + + + + + COSO Action + + + + Control Activities + Policies and procedures are established and implemented to help ensure that +risk responses are carried out effectively. + + + + + Software Development + + + + + Releases + + + Coding + + + Testing + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/coso.adl b/src/images/generated/coso/coso.adl new file mode 100644 index 000000000..27b50f81e --- /dev/null +++ b/src/images/generated/coso/coso.adl @@ -0,0 +1,39 @@ + + + + + + + Internal Environment + What is the internal philosophy + and culture? + + Objective Setting + What are we trying to + accomplish? + + Event Identification + What could stop us from accomplishing it? + + Risk Assessment + How bad are these events? Will they really happen? + + Risk Answer + What are our options to stop those things from happening? + + Control Activities + Let's create something to make sure they don't happen. + + Information and Communication + With whom will will we obtain information and communicate? + + Monitoring + How will we know that we've achieved what we wanted to accomplish? + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/event-identification.adl b/src/images/generated/coso/event-identification.adl new file mode 100644 index 000000000..ea740e4b2 --- /dev/null +++ b/src/images/generated/coso/event-identification.adl @@ -0,0 +1,37 @@ + + + + + + + COSO Action + + + + Event Identification + Identifying what could stop the organisation from accomplishing its goals. + + + + + Software Development + + + + + Measurement + Working out what to track to monitor risks to our project. + + + Analysis + Ascertaining what risks exist within the environment you’re operating in, or +what risks you’re addressing in the project. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/internal-environment.adl b/src/images/generated/coso/internal-environment.adl new file mode 100644 index 000000000..b2b37a45b --- /dev/null +++ b/src/images/generated/coso/internal-environment.adl @@ -0,0 +1,38 @@ + + + + + + + COSO Action + + + + Set Internal Environment + Establish the internal risk philosophy and appetite. + + + + + Software Development + + + + + Terms of Reference + Writing a “Terms of Reference”: capturing the high-level purpose and + structure of the project. + + + Stakeholder Management + Identifying and managing the interests of the + stakeholders of the project. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/monitoring.adl b/src/images/generated/coso/monitoring.adl new file mode 100644 index 000000000..1bc4c8e40 --- /dev/null +++ b/src/images/generated/coso/monitoring.adl @@ -0,0 +1,36 @@ + + + + + + + COSO Action + + + + Monitoring / Audit + Evaluating the effectiveness of the control activities. + + + + + Software Development + + + + + Feedback Systems + Such as bug reports, user acceptance testing. + + + Telemetry + System logs, metrics and health indicators. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/objective-setting.adl b/src/images/generated/coso/objective-setting.adl new file mode 100644 index 000000000..445541327 --- /dev/null +++ b/src/images/generated/coso/objective-setting.adl @@ -0,0 +1,36 @@ + + + + + + + COSO Action + + + + Objective Setting + Understanding the organisational goals we're trying to accomplish. + + + + + Software Development + + + + + Requirements Capture + Understanding the goals or risks we're addressing in the project. + + + Change Management + Tracking changes to the project’s goals. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/risk-assessment.adl b/src/images/generated/coso/risk-assessment.adl new file mode 100644 index 000000000..d3bb3de04 --- /dev/null +++ b/src/images/generated/coso/risk-assessment.adl @@ -0,0 +1,33 @@ + + + + + + + COSO Action + + + + Risk Assessment + Considering the probability and impact, of risks to the goals of the organisation. + + + + + Software Development + + + + + Prioritising + Ranking software development risks in order of importance to +work on. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/coso/risk-response.adl b/src/images/generated/coso/risk-response.adl new file mode 100644 index 000000000..02d2226ba --- /dev/null +++ b/src/images/generated/coso/risk-response.adl @@ -0,0 +1,36 @@ + + + + + + + COSO Action + + + + Risk Response + Mitigate, accept, or transfer risks. + + + + + Software Development + + + + + Design + Figuring out how to address the risks you've identified. + + + Prototyping + Evaluating approaches for mitigating risks. + + +
+ + \ No newline at end of file diff --git a/src/images/generated/introduction/cadence.adl b/src/images/generated/introduction/cadence.adl index 1b51db3c0..538e104f9 100644 --- a/src/images/generated/introduction/cadence.adl +++ b/src/images/generated/introduction/cadence.adl @@ -6,30 +6,25 @@ style="--kite9-layout: right; --kite9-min-width: 900pt;"> - + Fast Feedback - - - Some Risks - - - + + Some Risks + + + Fast feedback will expose some hidden risks... + - + Thorough Feedback - - - More Risks - - Schedule Risk - - + + More Risks + + Schedule Risk + + but thorough feedback will expose more risks at the + expense of the schedule. + diff --git a/src/images/generated/introduction/risk_matrix.adl b/src/images/generated/introduction/risk_matrix.adl index 7d1712cbd..60d198827 100644 --- a/src/images/generated/introduction/risk_matrix.adl +++ b/src/images/generated/introduction/risk_matrix.adl @@ -6,16 +6,33 @@ xmlns:pp="http://www.kite9.org/schema/post-processor" style="--kite9-layout: right; " xmlns:svg="http://www.w3.org/2000/svg"> - +
+ + High + + + + Impact + + + + Low + + + + style=" --kite9-occupies: 1 1; --kite9-min-size: 300pt 300pt; "> 1 2 3 @@ -24,16 +41,9 @@ - - - Probability - - + style="--kite9-occupies: 3 1; --kite9-vertical-align: top; --kite9-padding-left: 10pt; --kite9-layout: down; --kite9-vertical-align: top; --kite9-horizontal-align: left;"> Ruin The Food - + + + Probability + + + + + + High + +
\ No newline at end of file diff --git a/src/images/generated/introduction/waterfall3.adl b/src/images/generated/introduction/waterfall3.adl index 1ba69456c..4afe668b2 100644 --- a/src/images/generated/introduction/waterfall3.adl +++ b/src/images/generated/introduction/waterfall3.adl @@ -36,20 +36,21 @@ Specification Fixed Price Contracts - - Requirements - Changes - - Late - Delivery - - Cost - Overruns - - + diff --git a/src/images/generated/risks/ai/eu_response.adl b/src/images/generated/risks/ai/eu_response.adl index efe4580b6..29688d68a 100644 --- a/src/images/generated/risks/ai/eu_response.adl +++ b/src/images/generated/risks/ai/eu_response.adl @@ -7,11 +7,11 @@ - + - Increased risk of bias and discrimination in software - systems. + Bias and discrimination + in software systems. @@ -32,7 +32,7 @@ - Increased pace of job displacement + Job displacement diff --git a/src/images/generated/risks/ai/future_risks.adl b/src/images/generated/risks/ai/future_risks.adl index bd6bdf447..e1bf89c0a 100644 --- a/src/images/generated/risks/ai/future_risks.adl +++ b/src/images/generated/risks/ai/future_risks.adl @@ -6,28 +6,22 @@ style="--kite9-min-width: 900pt; --kite9-layout: down;"> - + Loss of human control - Advanced AI operates autonomously and resists shutdown, potentially causing harm - - - - Misaligned - Goals - AI interprets objectives in harmful or unintended ways, prioritizing metrics over human welfare. + AI systems operating autonomously with minimal human oversight can lead to scenarios where we cannot override or re-align them with human values. Superintelligence with malicious intent - AI develops or is given goals antagonistic to humanity potentially escalating conflicts or acting unpredictably. + An advanced AI could actively act against human interests, whether intentionally programmed that way or as an emergent behavior. Unintended Cascading Failures - AI failures destabilize global systems (e.g., financial markets, infrastructure), or over-reliance leaves humanity vulnerable to crises. + AI interacting with critical systems (finance, infrastructure, etc.) may trigger global-scale unintended consequences. @@ -42,12 +36,6 @@ Loss of Diversity A single AI system dominates globally, leading to catastrophic consequences if it fails, suppresses freedoms, or entrenches inequalities, consolidating power in few hands. - - - Existential Competition - AI competes with humanity for resources or survival, potentially prioritizing its own existence at humanity's expense. - - Synthetic Intelligence Rivalry diff --git a/src/images/generated/risks/ai/future_risks_vendors.adl b/src/images/generated/risks/ai/future_risks_vendors.adl index 8795e2719..a41567ea5 100644 --- a/src/images/generated/risks/ai/future_risks_vendors.adl +++ b/src/images/generated/risks/ai/future_risks_vendors.adl @@ -24,6 +24,14 @@ Building systems using AI is not deterministic "engineering" + + + + + + The pace of AI / technology introduces new failure modes + and worsens the threat landscape. + @@ -33,4 +41,8 @@ + + + + \ No newline at end of file diff --git a/src/images/generated/risks/ai/navigating-future.adl b/src/images/generated/risks/ai/navigating-future.adl new file mode 100644 index 000000000..f5dc1a441 --- /dev/null +++ b/src/images/generated/risks/ai/navigating-future.adl @@ -0,0 +1,33 @@ + + + + Exponential + Technology Trends + + + Supply chain complexity + Software complexity + + + + Talent + Shortages + + + + Volume of + Legislation + + + + CVEs + Supply chain attacks + + + + + diff --git a/src/images/generated/risks/ai/oss_supply_chain.adl b/src/images/generated/risks/ai/oss_supply_chain.adl new file mode 100644 index 000000000..ed3a52f23 --- /dev/null +++ b/src/images/generated/risks/ai/oss_supply_chain.adl @@ -0,0 +1,48 @@ + + + + + + + + The open source software + supply chain poses numerous + security risks to + organisations using + open source software. + + + + + + Software Bill-of-Materials + (SBOMs) + Providing transparency of the code contents of software products. + + + National Vulnerability Database + (NVD) + Cataloguing known vulnerabilities in software and providing a way to be notified about them. + + + OpenSSF + Best Practices / + Security Baseline + Hygiene standards around open source projects to prevent bad actors from exploiting them. + + + + + + + + + + + + + diff --git a/src/images/generated/risks/ai/revolutions.adl b/src/images/generated/risks/ai/revolutions.adl new file mode 100644 index 000000000..0b93a01a0 --- /dev/null +++ b/src/images/generated/risks/ai/revolutions.adl @@ -0,0 +1,32 @@ + + + + + Cognitive Revolution + Development of language, storytelling, and abstract thought. + + + Agricultural Revolution + Shift from foraging to farming. Led to permanent settlements, property, hierarchies, and eventually kingdoms and empires. + + + Industrial Revolution + Technological breakthroughs, capitalism, mechanization, and the modern industrial world. + + + + + Information Revolution + Computers, internet and mass media reshape labour, culture and governance. + + + AI Revolution? + Further change in the nature of human organisation. + + + + diff --git a/src/images/generated/risks/ai/synthetic_intelligence_rivalry.adl b/src/images/generated/risks/ai/synthetic_intelligence_rivalry.adl new file mode 100644 index 000000000..39ede6255 --- /dev/null +++ b/src/images/generated/risks/ai/synthetic_intelligence_rivalry.adl @@ -0,0 +1,39 @@ + + + + + + Synthetic Intelligence Rivalry + Rival AI entities could emerge with conflicting goals, leading to competition with humanity akin to geopolitical conflicts. (AI Colonialism) + + + + + + + Global AI Governance + Can provide international oversight, but effectiveness depends on cooperation among nations. + + + National AI Regulation + Government policies can strongly influence AI firms' behavior if enforced effectively. + + + Multi-Stakeholder Oversight + By involving multiple stakeholders, concentration of the gains from AI can be shared across civilisation, mitigating economic disruption. + + + + + + + + + + + + diff --git a/src/images/generated/risks/chapters/Agency-Risk.adl b/src/images/generated/risks/chapters/Agency-Risk.adl new file mode 100644 index 000000000..558556a3a --- /dev/null +++ b/src/images/generated/risks/chapters/Agency-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to the fact that things you depend on have agency, and they have their own goals to pursue. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Communication-Risk.adl b/src/images/generated/risks/chapters/Communication-Risk.adl new file mode 100644 index 000000000..1c6fe8009 --- /dev/null +++ b/src/images/generated/risks/chapters/Communication-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risk associated with getting messages heard and understood and the transfer of information. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Complexity-Risk.adl b/src/images/generated/risks/chapters/Complexity-Risk.adl new file mode 100644 index 000000000..d4c1a4839 --- /dev/null +++ b/src/images/generated/risks/chapters/Complexity-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks caused by the weight of complexity in the systems we create, and their resistance to change and comprehension. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Coordination-Risk.adl b/src/images/generated/risks/chapters/Coordination-Risk.adl new file mode 100644 index 000000000..1075d9d98 --- /dev/null +++ b/src/images/generated/risks/chapters/Coordination-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to the fact that systems contain multiple agents, which need to work together. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Deadline-Risk.adl b/src/images/generated/risks/chapters/Deadline-Risk.adl new file mode 100644 index 000000000..8af5678f5 --- /dev/null +++ b/src/images/generated/risks/chapters/Deadline-Risk.adl @@ -0,0 +1,14 @@ + + + + + The risk of creating a dependency around a point in time. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Dependency-Risks.adl b/src/images/generated/risks/chapters/Dependency-Risks.adl new file mode 100644 index 000000000..2cb8eb121 --- /dev/null +++ b/src/images/generated/risks/chapters/Dependency-Risks.adl @@ -0,0 +1,70 @@ + + + + + + + + The risk that a system will fail to perform its required functions under stated conditions for a specified period of time. + + + + + + The risk that a project will not be completed on time. + + + + + + The risk that a project will not meet its deadline. + + + + + + The risk that a project will not have sufficient funding to complete. + + + + + + + + + + + The risk that a process will fail to produce the desired outcome. + + + + + + The risk that an agent will not act in the best interests of the principal. + + + + + + The risk that a system will be locked into a particular technology or vendor. + + + + + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Environmental-Risks.adl b/src/images/generated/risks/chapters/Environmental-Risks.adl new file mode 100644 index 000000000..c089633ce --- /dev/null +++ b/src/images/generated/risks/chapters/Environmental-Risks.adl @@ -0,0 +1,36 @@ + + + + + + Risks due to hostile agents and events from inside or outside of the system. + + + + + Risks due to the legal context in which an operation is running. + + + + + Reputational risk is the potential harm to reputation. + + + + + The risk of loss resulting from inadequate or failed internal processes, people and systems or from external events. + + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Feature-Fit-Risk.adl b/src/images/generated/risks/chapters/Feature-Fit-Risk.adl new file mode 100644 index 000000000..d6a493173 --- /dev/null +++ b/src/images/generated/risks/chapters/Feature-Fit-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risk that the needs of the client don't coincide with services provided by the supplier. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Feature-Risks.adl b/src/images/generated/risks/chapters/Feature-Risks.adl new file mode 100644 index 000000000..314ed20dc --- /dev/null +++ b/src/images/generated/risks/chapters/Feature-Risks.adl @@ -0,0 +1,28 @@ + + + + + + Risk that the needs of the client don't coincide with + services provided by the supplier. + + + + Risk that the functionality you are providing doesn't correctly implement the perceived solution you are trying to build for your clients. + + + + Risk that the value your clients place on the features you supply will change over time. + + + + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Funding-Risk.adl b/src/images/generated/risks/chapters/Funding-Risk.adl new file mode 100644 index 000000000..689c15e55 --- /dev/null +++ b/src/images/generated/risks/chapters/Funding-Risk.adl @@ -0,0 +1,14 @@ + + + + + A particular dependency risk on funding. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Implementation-Risk.adl b/src/images/generated/risks/chapters/Implementation-Risk.adl new file mode 100644 index 000000000..896f55a8f --- /dev/null +++ b/src/images/generated/risks/chapters/Implementation-Risk.adl @@ -0,0 +1,15 @@ + + + + + + Risk that the functionality you are providing doesn't correctly implement the perceived solution you are trying to build for your clients. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Internal-Model-Risk.adl b/src/images/generated/risks/chapters/Internal-Model-Risk.adl new file mode 100644 index 000000000..5141e25c7 --- /dev/null +++ b/src/images/generated/risks/chapters/Internal-Model-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to the differences between reality and an internal model of reality, and the assumption that they are equivalent. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Legal-Risk.adl b/src/images/generated/risks/chapters/Legal-Risk.adl new file mode 100644 index 000000000..7eb033f4e --- /dev/null +++ b/src/images/generated/risks/chapters/Legal-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to the legal context in which an operation is running. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Lock-In-Risk.adl b/src/images/generated/risks/chapters/Lock-In-Risk.adl new file mode 100644 index 000000000..562fe4c12 --- /dev/null +++ b/src/images/generated/risks/chapters/Lock-In-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to the commitments we make around dependencies, and the limitations they place on our ability to change. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Market-Risk.adl b/src/images/generated/risks/chapters/Market-Risk.adl new file mode 100644 index 000000000..775a1dee3 --- /dev/null +++ b/src/images/generated/risks/chapters/Market-Risk.adl @@ -0,0 +1,15 @@ + + + + + + Risk that the value your clients place on the features you supply will change over time. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Model-Risks.adl b/src/images/generated/risks/chapters/Model-Risks.adl new file mode 100644 index 000000000..54241314c --- /dev/null +++ b/src/images/generated/risks/chapters/Model-Risks.adl @@ -0,0 +1,47 @@ + + + + + + + Risk associated with getting messages heard and understood and the transfer of information. + + + + + + Risks caused by the weight of complexity in the systems we create, and their resistance to change and comprehension. + + + + + + Risks due to the differences between reality and an internal model of reality, and the assumption that they are equivalent. + + + + + + Risks due to the fact that systems contain multiple agents, which need to work together. + + + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Operational-Risk.adl b/src/images/generated/risks/chapters/Operational-Risk.adl new file mode 100644 index 000000000..c17a50272 --- /dev/null +++ b/src/images/generated/risks/chapters/Operational-Risk.adl @@ -0,0 +1,14 @@ + + + + + The risk of loss resulting from inadequate or failed internal processes, people and systems or from external events. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Process-Risk.adl b/src/images/generated/risks/chapters/Process-Risk.adl new file mode 100644 index 000000000..21805d04d --- /dev/null +++ b/src/images/generated/risks/chapters/Process-Risk.adl @@ -0,0 +1,14 @@ + + + + + When you depend on a business process, human process or software process to give you something you need. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Reliability-Risk.adl b/src/images/generated/risks/chapters/Reliability-Risk.adl new file mode 100644 index 000000000..3a9413062 --- /dev/null +++ b/src/images/generated/risks/chapters/Reliability-Risk.adl @@ -0,0 +1,15 @@ + + + + + Risks of not getting benefit from a dependency due to it’s reliability. + + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Reputational-Risk.adl b/src/images/generated/risks/chapters/Reputational-Risk.adl new file mode 100644 index 000000000..5f7bed6b9 --- /dev/null +++ b/src/images/generated/risks/chapters/Reputational-Risk.adl @@ -0,0 +1,14 @@ + + + + + Reputational risk is the potential harm to reputation. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Schedule-Risk.adl b/src/images/generated/risks/chapters/Schedule-Risk.adl new file mode 100644 index 000000000..15e8ce782 --- /dev/null +++ b/src/images/generated/risks/chapters/Schedule-Risk.adl @@ -0,0 +1,14 @@ + + + + + The aspect of dependency risk related to variance around the time taken to complete tasks on a schedule. + + + \ No newline at end of file diff --git a/src/images/generated/risks/chapters/Security-Risk.adl b/src/images/generated/risks/chapters/Security-Risk.adl new file mode 100644 index 000000000..035fa9319 --- /dev/null +++ b/src/images/generated/risks/chapters/Security-Risk.adl @@ -0,0 +1,14 @@ + + + + + Risks due to hostile agents and events from inside or outside of the system. + + + \ No newline at end of file diff --git a/src/images/generated/risks/posters/agency-risk.adl b/src/images/generated/risks/posters/agency-risk.adl index b3c269dd7..5e8327f21 100644 --- a/src/images/generated/risks/posters/agency-risk.adl +++ b/src/images/generated/risks/posters/agency-risk.adl @@ -22,7 +22,9 @@ - + diff --git a/src/images/generated/risks/posters/communication-risk.adl b/src/images/generated/risks/posters/communication-risk.adl index 4f938f83c..a0821d1c9 100644 --- a/src/images/generated/risks/posters/communication-risk.adl +++ b/src/images/generated/risks/posters/communication-risk.adl @@ -6,7 +6,9 @@ id="diagram-113" xslt:template="/public/templates/risk-first/risk-first-template.xsl"> - + + + - + diff --git a/src/images/generated/risks/posters/complexity-risk1.adl b/src/images/generated/risks/posters/complexity-risk1.adl index d21e2b528..3968d0999 100644 --- a/src/images/generated/risks/posters/complexity-risk1.adl +++ b/src/images/generated/risks/posters/complexity-risk1.adl @@ -6,7 +6,9 @@ id="diagram-113" xslt:template="/public/templates/risk-first/risk-first-template.xsl"> - + + + - + diff --git a/src/images/generated/risks/posters/complexity-risk2.adl b/src/images/generated/risks/posters/complexity-risk2.adl index 17ca97a9a..5e09034c5 100644 --- a/src/images/generated/risks/posters/complexity-risk2.adl +++ b/src/images/generated/risks/posters/complexity-risk2.adl @@ -5,19 +5,26 @@ xmlns:xslt="http://www.kite9.org/schema/xslt" id="diagram-113" xslt:template="/public/templates/risk-first/risk-first-template.xsl"> - - + + + Risks + + + + Improvement + + + Hidden Risks - - Redundancy - - - - - - + + + + + + diff --git a/src/images/generated/risks/posters/coordination-risk1.adl b/src/images/generated/risks/posters/coordination-risk1.adl index b377f8587..87fc7ee77 100644 --- a/src/images/generated/risks/posters/coordination-risk1.adl +++ b/src/images/generated/risks/posters/coordination-risk1.adl @@ -6,7 +6,10 @@ id="diagram-113" xslt:template="/public/templates/risk-first/risk-first-template.xsl"> + + + Schedule Earlier @@ -22,10 +22,10 @@ - diff --git a/src/images/generated/risks/posters/feature-fit-risk.adl b/src/images/generated/risks/posters/feature-fit-risk.adl index e4a657631..b622ac0b6 100644 --- a/src/images/generated/risks/posters/feature-fit-risk.adl +++ b/src/images/generated/risks/posters/feature-fit-risk.adl @@ -6,7 +6,10 @@ id="diagram-113" xslt:template="/public/templates/risk-first/risk-first-template.xsl"> + + +