How to avoid causing the next global outage