Learning Lessons from Incidents

All organisations experience “Incidents”. Some call them by other names: “Near Misses”, “Mistakes”, “Errors & Omissions”, “Operational Errors”.  Some are big and have damaging consequences (e.g. a data breach), and some are small and might be classed as “an annoyance”, e.g. email down for 10 minutes (though some might find that a positive). Whatever the incident, you should consider each of these as a “learning opportunity.” An opportunity to improve a process or avoid costly errors.

In his book Black Box Thinking, Matthew Syed described learning from incidents and adopting a “Just Culture” where individuals are encouraged to report errors / mistakes and are not punished/blamed.

The starting point is to accept that incidents will happen and that 95% of the time it is because of poor process. Encourage people to report their mistakes and don’t beat them up for human error. Understand why it happened and what measures can be taken to avoid a re-occurrence. Update your processes and procedures as required and then communicate the changes/lessons learned to all relevant stakeholders.

Consider further if the incident required the invocation of a “response plan”. How was it handled?  Did the response plans work? Did people know what to do? Were actions taken in a timely manner? Is there anything you would do differently next time? For example: change the sequence of actions, include some additional steps/actions, call in an expert earlier in the process, communicate with customers earlier and let them know what is happening.

Take these learnings into account when you review/revise your response plans. Share your experiences with peers and encourage them to share their experiences with you (do this in a safe/secure sharing environment). Smart people learn from their mistakes, but the really smart ones learn from the mistakes of others.

To learn more about managing and reporting on Incidents, contact us today to request a free tailored demo.

 

 

 

 

 

 

Recent News

Carbon Accounting – I’ve calculated my emissions – How do I report?

Congratulations you've calculated your emissions! Now for next steps. Reporting your emissions is a crucial step for transparency, ...
Read More

CNaught and GreenFeet Team Up to Simplify Climate Action 

We are so excited to announce our partnership with CNaught, a leading provider of high-integrity carbon credit portfolios. ...
Read More

Carbon Accounting – Where Do I Start ? 

Are you a business looking to measure your carbon emissions? Do you find yourself lost amongst the numerous ...
Read More
NIS2 EU Cybersecurity Directive EU-wide legislation

How Incidents Link to Controls

Effective risk management is essential for organisations to protect their assets, reputation, and operational continuity. One of the ...
Read More

CalQRisk Nominated for Four RegTech Insight Awards – Vote Now!

We’re excited to share some fantastic news—CalQRisk has been nominated for four prestigious awards in the RegTech Insight ...
Read More

CalQRisk: A Finalist for the 2025 ECSO Cybersecurity Awards

We are thrilled to announce that we’ve been named a finalist in the ECSO Awards 2025, competing for ...
Read More

CalQRisk Acquire GreenFeet and Launch Sustainability Solution 

CalQRisk have acquired GreenFeet, a tried and tested solution that allows organisations to -   Calculate their emissions using ...
Read More

Digital Operational Resilience Act (DORA): A New Era Begins

Today, January 17th, 2025, marks a significant milestone in the European Union's regulatory landscape with the official launch ...
Read More

CalQRisk Shortlisted as Best Technology Partner in Housing Digital Innovation Awards

CalQRisk has been named a finalist in the Housing Digital Digital Innovation awards. CalQRisk is nominated as best ...
Read More

CalQRisk Achieves G-Cloud 14 Approved Supplier Status

Delighted to confirm that following on from our GCloud 13 supplier status, that CalQRisk has been listed as ...
Read More