logo

Systemantics Systemfehler Komplexitaet

Systemantics: The Inconvenient Truths About Complex Systems

 

 

Introduction: Why Brilliant Plans for Complex Systems Fail

 

In the world of information technology, vast sums and countless hours are invested in developing complex systems – from global software platforms and cloud infrastructures to enterprise-wide ERP implementations. Despite brilliant engineers, detailed project plans, and state-of-the-art methodologies, many of these endeavors end in partial or complete failures. To understand why this is, it's worth looking at a classic work that is more relevant today than ever: "Systemantics: How Systems Work and Especially How They Fail" by Dr. John Gall.

In his 1975 book, Gall explains with sharp wit and profound insight why complex systems have an inherent tendency to fail in unexpected, unpredictable, and often paradoxical ways. His findings are not an indictment of technology itself, but a description of fundamental laws that apply to all complex systems. For anyone working in IT, Systemantics offers an indispensable lens through which to recognize recurring patterns of failure and perhaps – with due humility – avoid them.


 

The Fundamental Axioms of System Failure (According to Gall)

 

Gall formulates a series of axioms that describe the nature of complex systems. They are often counterintuitive, but upon closer inspection, they are eerily accurate.

The Fundamental Axiom of Systemantics: "Systems in general work poorly or not at all." This is not intended as a cynical exaggeration but as a realistic starting point. The assumption that a new, complex system will function smoothly is the exception, not the rule.

Gall's Law: "A complex system that works is invariably found to have evolved from a simple system that worked." This is perhaps the most famous and important principle. It has a crucial corollary:

"A complex system designed from scratch never works and cannot be made to work. You have to start over, with a working simple system." This law explains why "Big-Bang" projects that attempt to realize a huge system in one go almost always fail.


Further key axioms illuminate the treacherous nature of systems:


 

Post-Mortem of Major IT Catastrophes Through the Lens of Systemantics

 

Gall's axioms are not abstract theories; they are a powerful analytical tool for understanding why spectacular IT failures are not regrettable isolated incidents, but almost inevitable manifestations of universal system laws. The following analysis demonstrates this with four well-known examples.

The analysis of individual project failures initially provides specific, technical or procedural causes. For example, a software error was the cause of the Ariane 5 launch, while poor management played a role in the Denver airport baggage system. Gall's axioms, on the other hand, are abstract, universally valid principles. The strength of the following table lies in mapping concrete errors to abstract axioms. This creates a bridge from the specific to the general and enables crucial pattern recognition. One recognizes that the software error in Ariane 5 and the mechanical problems in Denver are not just isolated malfunctions, but both follow the axiom that complex systems collapse in unpredictable ways. This pattern recognition transforms the analysis from a mere "what happened?" description to a profound "why do such things keep happening?" insight.

Case Study

Observed Problem / Cause of Failure

Corresponding Systemantics Axiom

Ariane 5 Flight 501

Reuse of Ariane 4 software in a new, untested environment (higher horizontal velocity). An integer overflow due to a 64-bit floating-point value being converted to a 16-bit integer led to the failure of the inertial reference system and the self-destruction of the rocket.

"Complex systems exhibit unexpected behavior." / "A system that performs a specific function will continue to do so under changed conditions."

Denver Int. Airport Baggage System

The attempt to design the world's most complex automated baggage system from scratch, without a working prototype. The complexity (e.g., "line balancing" of 4,000 autonomous carts) was massively underestimated. The project failed catastrophically, delayed the airport's opening by 16 months, and cost an additional USD 560 million.

"A complex system designed from scratch never works." (Gall's Law) / "New systems generate new problems."

Therac-25

Removal of proven hardware safety interlocks and blind reliance on new software control. A subtle race-condition bug that occurred only with fast data entry led to massive radiation overdoses and deaths. Early user error reports were dismissed by engineers as impossible.

"Complex systems fail in infinitely many ways." / "People in systems are insulated from reality by the system."

FBI Virtual Case File

Unclear, constantly changing requirements ("Scope Creep"), poor management, and the attempt to build a huge, monolithic system to modernize the entire case management led to the project's cancellation after wasting USD 170 million, without delivering a working product.

"Complex systems tend to oppose their own proper function." / "Large systems produce complicated answers (not solutions)."


 

Lessons from Failure: Strategies for Dealing with Complexity

 

At first glance, Gall's work might seem pessimistic. However, the crucial insight is that modern approaches to organizational and leadership theory, as described in previous articles, can be understood as direct and practical answers to the pitfalls described by Gall.

Gall postulates: "Complex systems designed from scratch fail." Modern agile software development responds with the principle of the Minimum Viable Product (MVP) – start small and iterate. Team Topologies takes this idea to the extreme by demanding to start with a simple, working system managed by a single, autonomous Stream-aligned Team. The concept of the "Thinnest Viable Platform" from the Trade Me case study is the direct application of Gall's law to the level of internal platforms.

Gall notes: "People in systems are insulated from reality." Intent-Based Leadership counters this with the demand: "Shift authority to where the information is." This principle breaks through the system's information filters and forces decision-makers to confront reality on the front lines, instead of relying on distorted reports.

Gall warns: "Systems work best when they are designed to go downhill" – that is, to work with human inclinations, not against them. Servant Leadership embodies this principle by focusing on reducing friction and removing obstacles for employees, rather than trying to force the system to perform better through pressure and control.

The concepts from the first two articles are thus not just "good ideas" for better collaboration, but necessary survival strategies in a world subject to the relentless laws of Systemantics.


 

Conclusion: Humility as the Foremost Principle of Success

 

The most important lesson from Systemantics is the need for intellectual humility in the face of complexity. The assumption that one can fully understand, plan, and control a complex sociotechnical system is a dangerous illusion.

Successful organizations in the 21st century are not those with the most perfect, all-encompassing plans. They are those that can learn, adapt, and react to unexpected events most quickly. They acknowledge that failure is an unavoidable characteristic of complex systems and therefore build on resilience rather than deceptive perfection.

The combination of an adaptive, decoupled structure (Team Topologies), a serving and empowering leadership (Intent-Based & Servant Leadership), and a deep respect for the laws of complexity (Systemantics) forms the true foundation for resilient, innovative, and ultimately humane organizations that can not only survive but thrive in the digital age.

Let’s Make Things Happen

By submitting my data, I agree to be contacted. I have read and accept the Privacy Policy.