Systematic collection of safety incident / accident data has been common in many industries for decades. An equivalent effort has not been made in the area of information security, exclusive perhaps of highly specialized ...