A friend of mine is a Managing Director in an investment bank, he tells me his bonus is tied to the number and severity of outages in his domain. His simple answer is to tightly scrutinize all changes and reject all but the absolute minimum ie mandatory software upgrades, patches and functional changes his business users scream for
Risk management is more about perception than reality, as many risks cannot be quantified, no change does not equal no risk, but for some, it's close enough
It is impossible to impart a healthy respect for machinery unless one becomes hands-on familiar with its operation and potential dangers, we are not doing the next generations any favours by keeping them away from perceived dangers, much better they hang around the streets causing mischief…