Robust Systems
Over at The Atlantic, Edward Goldstick observes that it's not good enough to protect computers against bad guys and bogeymen under the bed. The system is going to need to be turned off eventually, either because something breaks or something needs to be improved or someone has made a mistake. Planning for outages and interruptions can be as important as locking the door.