Continous security improvement , learning from mistakes