In aviation, accident investigations aim to answer three key questions: What happened? Why did it happen? And what can we do to prevent it from happening again—or at least minimize the consequences if it does? But what about IT? In our industry, we often focus on assigning blame while continuing to make the same mistakes over and over and over again. Why is that? What makes aviation different from IT, and could we learn something from aviation to make IT security more resilient?

Michael Westlund has over 30 years of experience as a pilot alongside his role as an IT and information security consultant. In this talk, he shares his insights and experiences on what the IT industry can learn from the aviation world.