← All Book Reviews Book Review

The Phoenix Project

Gene Kim, Kevin Behr & George Spafford

The Phoenix Project cover

The novel that explains why your IT department is always on fire

Bill Palmer did not ask to be VP of IT Operations. He was given the role on a Tuesday morning, told the company's entire future depended on an impossible project called Phoenix, and informed that if it failed the whole division would be outsourced. By Friday, his predecessor had been fired and a critical payroll system was down across the business.

The Phoenix Project is a business novel in the tradition of Eli Goldratt's The Goal - fiction that is actually a Trojan horse for some of the most important ideas in modern technology delivery. The story of Parts Unlimited and its tortured IT department is so recognisable it reads less like fiction and more like a composite reconstruction of every technology organisation that has never quite figured out why things are always this hard.

The book introduced the language of DevOps to a generation of engineering leaders. More importantly, it explained why DevOps matters in terms any business leader can understand - not as a set of tools or practices, but as a fundamentally different way of thinking about the flow of work through a technology organisation.


Why this book matters

The vast majority of IT failures are not caused by bad people, bad technology, or bad luck. They are caused by bad systems - by the way work flows, waits, accumulates, and compounds through an organisation that was never designed to deliver software at pace. The Phoenix Project makes this visible through narrative in a way that no amount of framework documentation can.

The book's central insight - that IT is subject to the same constraints as a manufacturing plant, and that the principles of lean operations apply directly to software delivery - is the intellectual foundation of the DevOps movement. If you have ever wondered why your organisation seems structurally incapable of shipping reliably despite the competence of the individuals involved, this book will tell you exactly why.


Key insights

1. The four types of work - and why unplanned work destroys everything

Bill's mentor Erik introduces one of the book's most durable frameworks: the four types of IT work. Business projects (new features and capabilities). Internal projects (infrastructure, migrations, technical debt paydown). Changes (updates to production systems). And unplanned work - incidents, urgent fixes, emergency patches.

The critical insight is not the taxonomy itself. It is that unplanned work is the enemy of all planned work. Every time an incident fires, it steals capacity from every other type of work. And in most organisations, unplanned work is not managed - it simply arrives and takes priority by default, creating a self-reinforcing cycle of instability.

The teams that escape this cycle do not do so by working harder. They do so by systematically reducing the sources of unplanned work - improving deployment reliability, reducing technical debt, investing in observability - so that the interrupt load drops and capacity for planned work increases.


2. The Three Ways - flow, feedback, and continuous learning

Erik distils the philosophy of high-performing IT organisations into three principles. The First Way: optimise for fast flow from development to operations to the customer. The Second Way: create feedback loops that surface problems quickly and allow learning to flow back upstream. The Third Way: build a culture of experimentation and continuous learning from both success and failure.

These are not sequential steps. They are mutually reinforcing. Fast flow without feedback produces fast failures that repeat. Feedback without flow produces learning that cannot be acted upon quickly enough to matter. Neither is sustainable without a culture willing to experiment, fail safely, and improve deliberately.

Most organisations that struggle with delivery have optimised for the wrong thing - local efficiency in individual teams - rather than global flow through the entire system.


3. Constraints and the plant floor - Brent is not the problem

The character of Brent is one of the book's most important contributions to the field. Brent is the most capable engineer at Parts Unlimited. Every team wants him. Every incident requires him. And he is the single biggest bottleneck in the entire organisation - not because of anything he has done wrong, but because the organisation has made itself dependent on him.

Every organisation has a Brent. The question is whether leadership understands that protecting the Brent's time, documenting his knowledge, and distributing his expertise is a strategic imperative - not a nice-to-have. A constraint that is not actively managed will remain a constraint indefinitely, and work will continue to pile up in front of it.


4. Change management is a risk management problem

The Phoenix Project contains a damning portrait of what happens when change management is treated as an approval ceremony rather than a risk management practice. Changes go through a committee. The committee approves them. Things still break - because the committee is reviewing forms, not understanding risk.

The book argues for a fundamentally different approach: categorise changes by risk profile, automate the approval of standard changes, give operational teams genuine authority over deployment decisions, and build the telemetry to detect and reverse problems quickly rather than preventing deployment entirely. The goal of change management is not zero deployments. It is confident deployments.


5. IT and the business are not separate - they are the same system

The most important structural argument in the book is also the simplest: the idea that IT is a support function, separate from "the business," is not just outdated - it is actively harmful. At Parts Unlimited, every business goal depends on technology delivery. The lag between what the business needs and what IT can deliver is not a technology problem - it is a whole-system problem that requires whole-system thinking.

Organisations that continue to treat IT as a cost centre to be minimised and a service function to be measured on uptime metrics are making a strategic error. The question is not how to run IT more cheaply. It is how to run IT in a way that makes the business faster, safer, and more capable of responding to change.


Thought-provoking takeaways

  • If your senior engineers are the only people who can resolve production incidents, you do not have an operations capability - you have a critical single point of failure disguised as expertise.

  • Unplanned work is not bad luck. It is the interest you pay on deferred technical decisions. The longer you defer them, the higher the rate.

  • A deployment pipeline that takes two weeks to move code to production is not a technical constraint. It is an organisational choice - with significant business consequences.

  • Your change approval board probably reviews hundreds of changes and blocks very few. Of the ones it approves, a significant number still cause incidents. Is the process reducing risk, or creating the appearance of risk management?

  • The organisations depicted in this book as dysfunctional are not outliers. They are the norm. The organisations depicted as high-performing are achievable. The only difference is intention and investment.


Actions - for this quarter

  1. Map your unplanned work. For one month, track the volume of unplanned work your team handles - incidents, urgent requests, emergency fixes. Estimate the capacity it consumed. That number is the ceiling on how much planned improvement work you can do.

  2. Find your Brent. Identify the person (or people) whose absence would most severely damage your team's ability to function. Then build a deliberate plan to document, distribute, and reduce that dependency.

  3. Review your change process against risk. Categorise your last 20 changes by actual risk profile. How many were standard, repeatable, low-risk changes that went through a heavyweight approval process? What would a risk-proportionate process look like?

  4. Measure flow, not just output. Track the lead time from a work item being committed to it being in production. Understand where work waits, not just where it is active. The waits are where the losses are.

  5. Have the conversation with your business stakeholders about the system. Not IT versus business. The same system, with a shared interest in improving its flow. Start with one shared metric - lead time, deployment frequency, or incident recovery time - and make it visible to both sides.


"Improving daily work is more important than doing daily work."

  • Gene Kim