Review Guardrail Displacement

A reduction of risk within one system that causes users or workloads to migrate toward another system with weaker oversight.

A safeguard can make one service safer while pushing activity elsewhere. The measured risk falls inside the guarded system but may rise across the larger ecosystem.

Safety evaluation should include substitution behavior. Otherwise a local improvement can be mistaken for an overall reduction in harm.

A platform restricts a hazardous workflow, and users move the same work to an unmonitored service that has fewer controls and weaker incident response.

Guardrail displacement does not prove that the original guardrail was wrong. It shows that ecosystem effects and safer alternatives also need attention.

Risk left the platform, not necessarily the system.

* [[guardrail-inversion|Guardrail Inversion]] * [[constraint-migration|Constraint Migration]] * [[red-teaming|Red Teaming]] * [[system|System]]

* [Silic and Back, “Critical impact of organizational and individual inertia in explaining non-compliant security behavior in the Shadow IT context”](https://doi.org/10.1016/j.cose.2018.09.012) — empirically examines continued use of unapproved technology as non-compliant security behavior. This supports the mechanism of work moving outside governed systems; the paper does not use the Renaissance Solutions label “Guardrail Displacement.”

* Contrast with [[guardrail-inversion|Guardrail Inversion]] and [[constraint-migration|Constraint Migration]].