Why a 'Near Miss' Database Is Key to Improving Information Sharing

At RSAC 2026 speakers Wendy Nather and Bob Lord argued that the security industry should prioritize transparency around near-misses—events that almost caused harm but were stopped—rather than blaming individuals. They recommended focusing on root-cause analysis, building systems that reduce reliance on human perfection, and creating an anonymized, voluntary near-miss reporting mechanism (with safe-harbor protections) to share lessons and improve defenses across organizations.