Re: And this...
In construction it is easier to identify risks (e.g. falling from heights), address those risks (e.g. safety lines) and verify that best practise is being followed.
With aircraft after an incident there is an investigation to identify the root cause and if mechanical failure then inspections are ordered with dates based on how likely the failure is. Software flight controls make it much harder to test and identify the root cause.
IT risks are harder to identify (zero days), harder to address and even harder to train users.
Biting the hand that feeds IT
