Browse Definitions :
Definition

Conway's law

Contributor(s): Ivy Wigmore

Conway’s law is an observation that the design of any system is significantly affected by the communications structure of the organization that develops it. The law is commonly associated with software development but is considered applicable to systems and organizations of all types.

Melvin Conway, a computer scientist and programmer, developed his theory in 1967 as the basis for a paper, "How do committees invent?" that he was submitting to the Harvard Business Review. Here's the original formation: "Any organization that designs a system (defined broadly) will produce a design whose structure is a copy of the organization's communication structure."

HBR rejected the paper on the grounds that Conway had not proved his thesis; the paper was published in April 1968 in Datamation, the leading IT magazine of the time. Fred Brooks cited the observation in his article, "The Mythical Man-Month" and referred to it as Conway's law.

The Harvard Business School subsequently conducted a study, "Exploring the Duality between Product and Organizational Architectures," to attempt to prove Conway's thesis. Researchers compared the codebases of multiple applications of the same type that had been created by loosely-coupled open source development teams and tightly-coupled teams. They found that the tightly-coupled teams tended to develop tightly-coupled, monolithic codebases while the loosely-coupled open source teams tended to create more modular, decomposed codebases. It has been observed, similarly, that if multiple teams are working on program modules and inter-team communication is poor, the interfaces of the program will reflect that fact.

Conway's law is often mentioned in reference to the DevOps trend, which is based on effective communication and collaboration among development and operations teams.

See Dan Slimmon's presentation, Conway's Law: The Skeleton of DevOps:

This was last updated in October 2016

Continue Reading About Conway's law

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

  • compliance as a service (CaaS)

    Compliance as a Service (CaaS) is a cloud service service level agreement (SLA) that specified how a managed service provider (...

  • data protection impact assessment (DPIA)

    A data protection impact assessment (DPIA) is a process designed to help organizations determine how data processing systems, ...

SearchSecurity

  • computer worm

    A computer worm is a type of malicious software program whose primary function is to infect other computers while remaining ...

  • Single Sign-On (SSO)

    Single sign-on (SSO) is a session and user authentication service that permits a user to use one set of login credentials (e.g., ...

  • Certified Information Systems Auditor (CISA)

    Certified Information Systems Auditor (CISA) is a certification issued by ISACA to people in charge of ensuring that an ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

SearchStorage

Close