This post expands on a train of thought initiated by Dan North in his talk “Kicking the Complexity Habit” at NDC London 2014.
“Frequent releases reduce risk” – this is something you hear all the time in conversations about Continuous Delivery. How exactly is this the case? It sounds counter-intuitive. Surely releasing more often is introducing more volatility into Production? Isn’t it less risky to hold off releasing as long as possible and take your time with testing to guarantee confidence in the package?
Let’s think about what we mean by risk.
What is risk?
Risk is a factor of the likelihood of a failure happening combined with the worst case impact of that failure:
Therefore an extremely low risk activity is when failure is incredibly unlikely to happen and the impact of the failure is negligible. Low risk activities also include those where either of these factors is remarkably low such that it severely reduces the effect of the other.
Playing the lottery is low risk – the chance of failing (i.e. not winning) is very high, but the impact of failing (i.e. losing the cost of the ticket) is minimal, hence why many people play the lottery.
Flying is also low risk due to the factors being balanced the opposite way. The chance of a failure is extremely low – flying has a very high safety record – but the impact of a failure is extremely high. We fly often as we consider the risk to be very low.
High risk activities are when both sides of the ratio are high – high likelihood of failure and high impact, for example extreme sports such as free solo climbing and cave diving.
Large, infrequent releases are riskier
Small, frequent releases reduce the likelihood of a failure
Releasing often, containing as small a change as possible, reduces the likelihood that the release will contain a failure.
There’s no way to reduce the impact of a failure – the worst case is still that the release could bring the whole system down and incur severe data loss, but we lower the overall risk with the smaller releases.
Release small changes often and reduce the likelihood of a failure and therefore the risk.