Tag
impact-analysis
- Apr 21, 2025 Assets as Security Properties Rather Than Components Why an asset inventory keyed by server names produces useless threat lists, how to decompose a system into confidentiality, integrity, and availability assets, and what ownership of each asset implies. security
- Aug 26, 2024 Severity Classification as a Routing Input How a severity level selects the channel, the responders, and the update cadence, and why definitions anchored in observable impact outperform definitions anchored in alarm. devops
- Mar 25, 2024 Column-Level Lineage and the Cost of Tracking It Deriving which upstream column feeds which downstream column requires parsing every query; the alternative is coarse and the fine-grained version has an unbounded cost. data engineering