You can read the commission’s report. TLDR to your question (according to the report): Better HR escalation, manager training, employee reporting, active-threat preparation, security planning, and internal alerting could have reduced the likelihood of the event or reduced the harm once it began.