—Successful secure knowledge management requires consideration of both technical and organizational concerns. We use the example of existing industrial incident management systems to delineate a causal structure that represents these organizational challenges. A dynamic simulation illustrates the cumulative effects of rewards, learning, and retributions on the fate of a hypothetical knowledge management system designed to collect information about events and incidents. Simulation studies are part of an ongoing research project to develop sustainable knowledge and knowledge transfer tools that support the development of a security culture.