It also might explain an anomaly several of you called to my
attention following the statistics I mentioned last week regarding the
H1N1 virus.
Early reports indicated a 30% rate of contagion and a 1.25%
mortality rate. The most recent U.S. statistics on the pandemic - one
million confirmed cases and one thousand deaths - yield a mortality
rate more than ten times lower.
Proof that the Alarm Industry has been at it again?
More likely, the observer effect is at work. In round numbers, every
single healthcare professional in the United States has been thoroughly
prepared to properly diagnose and treat the disease.
What's missing: Clinicians do not report (and most likely can't
accurately determine) what the outcomes would have been without the
preparation they received. Lacking this information we have no certain
way to determine whether we should be cautiously celebrating success or
angrily attacking the false-alarmers.
I'd say the odds favor it being the observer effect.
For several weeks we've explored the personal risk of successful
prevention, and what to do about it. Leave it at this: Whatever you're
trying to prevent, whether it's malware intrusions or unnecessary calls
to the Service Desk, do everything possible to define metrics that can
document success when it happens. Yes, it makes you the beneficiary of
Metrics Fallacy #4 (see Chapter 3 of Keep the Joint Running: A Manifesto for 21st Century Information Technology). The alternative is worse: Being the victim of your own success.
But go back a few steps, to where you decided you had something important to prevent. Imagine that instead of prevent you chose one of the other four possible responses to a risk: Mitigate (reduce the impact through an approved contingency plan); insure (share the hurt with others); accept
(either hope, or decide the risk is so remote or minor that any advance
effort is a fifty buck solution to a five buck problem); or oops (miss the risk entirely and be caught by surprise).
It doesn't matter which. In project-management parlance your risk has become an issue. In plain English you have a problem.
Now what?
First and foremost, you and your team have to deal with the problem,
quickly, thoroughly, and professionally. It's a matter of self-respect.
Then you have to choose one of the four responses to realized risk that no methodology will mention - the political responses: Conceal, minimize, blame-shift, and report. Here's how they break down:
-
Conceal: Yes, conceal. Ever hear the phrase "We give
employees information on a need-to-know basis"? With a bad reporting
relationship, or in highly political organizations that have a
blame-oriented culture, carefully filtering the information that
ascends the organizational hierarchy is a critical survival skill. If
you and your team can deal with the problem without it gaining much
visibility, your manager might not need to even know it took place.