Risk assessment and the theory of constraints
![]() |
Why do software projects fail? |
For some reason, July and the first half of August in Israel is one of the busiest times of the year. Q2 is typically a soft sales quarter and you would have thought that July and August would be vacation time where things are slowing down - but Israelis smell the holidays in September and pack in as much as possible before Aug 15th when the country really shuts down.
We're working on several software security assessment projects in parallel and I'm reminded again that risk assessment goes way beyond technical countermeasures.
The work is pretty intense and while the organizations are totally different - one is a large technology manufacturer, one is a small embedded software developer and another is a large government corporation.
If you remember TOC ( Theory of Constraints, invented by Dr. Eli Goldratt about 40 years ago) there is only 1 key constraint that limits system (or company) performance to achieve it's goal.
So - what is that 1 key constraint for risk assessments?
Continue reading "Risk assessment and the theory of constraints" »

