A few habits that consistently improve incident reviews without making them longer:
- Separate what happened from why it happened — answer the first fully before even attempting the second.
- Force a written timeline before anyone offers an explanation.
- State out loud what the controls were supposed to catch, even if they did catch it.
Each of these is cheap. Skipping any of them is where reviews quietly decay.