Another variation on the problem is the over-allocation of resources to preventing problems which actually happened once, versus those that are more severe but haven't happened yet.
This is a management problem, because no-one wants to be accountable for a repeat incident even if it was rational to be working on something else more important.
This is a management problem, because no-one wants to be accountable for a repeat incident even if it was rational to be working on something else more important.