Incidents happen, but learning from them is challenging

The recent #CrowdStrike incident reminded us again about the ever-present digital vulnerabilities and how incidents are so close to our critical infrastructure. Apart from handling them;

• How can organizations develop capabilities to become more resilient to these incidents?
• What are the effective learning methods when incidents are not just repetitions of past events but arise from new combinations of technologies, people, and processes?

In our paper, on “How Do Organizations Learn from Information System Incidents? A Synthesis of the Past, Present, and Future” we synthesized insights of nearly 40 years of research.

One core message is that organizations should NOT merely rely on post-hoc incident analysis, they need to embrace other mechanisms that enable them to learn “during” the process of handling incident and “before” current vulnerabilities turn into future incidents. This all requires specific methods and techniques, and particularly designing and running learning practices as a natural part of working through incidents.

Mohammad Hosein Rezazade Mehrizi Davide Nicolini Joan Rodon Mòdol

https://misq.umn.edu/how-do-organizations-learn-from-information-system-incidents-a-synthesis-of-the-past-present-and-future.html

#organizationallearning, #incident, #learningorganizations KIN Center for Digital Innovation