Jump to content
Resilience Coffee/2026/07/02
- Transparency around goal framing reasons/metrics
- Success stories of safety II
- Pushing an organization on the new view of safety
- 40th Anniversary of Challenger Disaster
- Human factors: Thomas Watson, Sr. on how we deal with people who make mistakes.
- Making a case for the why of compliance
- Polishing messaging and delivery
- Depends on the compliance regime
- Type 1 and Type 2 are different
- Gateway to partners/customers
- Partner with sales: "Of those who fell off our sales funnel, 90% asked for our SOC2 report"
- Continue to do what you say you do, improve it year over year
- https://fly.io/blog/soc2-the-screenshots-will-continue-until-security-improves/
- Keep the CC networks happy
- Maintaining relationship with government
- Long time scale because of captive customer
- Ensure your financial reporting is consistent and reliable.
- https://davidmarquet.com/books/turn-the-ship-around-book/
- Adopt the metrics the team decides are important
- Adopt the practices that they are already doing out of habit, not the aspirations of the team
- At scale, internal auditors do their own assessments, good to have partners
- Brought a colleague in from first responder/fire fighter discipline to share their perspective
- Abstracting away controls between regimes
- Adopt the metrics the team decides are important
- Grenfell tower disaster: stakeholders assumed compliance statements
- AI driven compliance risks https://deepdelver.substack.com/p/delve-fake-compliance-as-a-service
- Cathedral and Bazaar - Eric S. Raymond
- More about governance than mastery of craft
- Would encourage exploring polycentric governance after finishing it
