Re: Infosec ≠ cyberattack
"incident investigation reports from the transport industry. They actually do a much better job...."
Air and rail, yes. I'm less convinced by maritime ones.
Let's not even go there with road safety. Although the police do a damn fine job looking at the immediate cause, that is more for blame attribution rather than learning lessons.