Lessons Learned from Reviewing 150 Infrastructures