This message was deleted.

I agree 0 incidents is never going to happen, plus you do get value like you mentioned of testing your response, update procedures and the troubleshooting might even lead to finding out a much bigger problem 🙂

I would agree that more incidents are better for decreasing overall risk in the future, but the team must ensure a good design of monitoring and incident notification/response to be able to distinguish severity between incidents and respond accordingly.

Theres something to be said about more repeat incidents as not being beneficial