If you're doing root cause analysis of a system failure, you're not looking to blame an individual. If you find something malicious then, sure, deal with it. But assume good faith in all parties from the outset and you're more likely to succeed in fixing the problem.
True, the postmortem should not be focused on blaming any one person. But that doesn't mean you shouldn't ignore the presence of such crimes or prosecute them!
