Yes, Checklist in aviation and aerospace are crucial, but at the same time, you have to avoid checklist for checklist sake.

But they also do a lot of failure response testing, simulations where you walk through a failed checklist or incidient and how you would response. Cypersecurity does pen testing and phishing attempts, but how about dry runs where you act as if you are compromised and everyone runs a "fire drill" scenario?