What's funny is that checklists in hospitals have been shown, empirically, to be massive life-saving devices.
cyber perhaps not so much...
Checklists work well in high stress situations where you cannot forget a step (medicine, aviation).
A checklist in a security incident? Probably helpful.
A security checklist to satisfy auditors and ancient regulations? This is an entirely different kind.
Checklists are a good tool for making sure you don't forget something. They're a terrible replacement for actually thinking.
Checklists solve the problem of forgetting specific details. They work very well in situations where all possible problems have been enumerated and the only failure mode is forgetting to check for one.
They do not solve the problem of getting people to think things through and recognize novel issues.
There are some jobs you can't do well. You can do them adequately or screw them up. Checklists are helpful in those jobs.