Andy starts with a story around how we respond to an incident without considering what performance mode(s) the people executing the task are in. From there, we discuss why we should shift our energy and resources into adding mitigation defenses rather than something like "retraining" post-incident.