When a major incident hits, the focus naturally turns to restoration. Yet the real test comes afterwards. What can be learned from past failings?