If humans had even a small hand in the incident then it must be prevented from occurring again. No different than debugging technical issues in a datacenter then finding the root cause and making best efforts to mitigate future incidents, via technical and policy changes. There must be significant consequences for violating the future policies.