Root Cause Analysis (RCA)
Understand why it happened, so it does not happen again.
Overview
Security root cause analysis is a structured investigation that determines the underlying cause of a security incident or recurring vulnerability, not just the symptom. Using techniques like the 5 Whys and Ishikawa diagrams, an independent team traces the chain of events to its origin and produces a remediation roadmap.
Methodology & Standards
5 Whys, Ishikawa diagrams and fault tree analysis, aligned with NIST SP 800-61 lessons-learned and SANS incident-response practices.
What's Included
What You Receive
Frequently Asked Questions
Incident response stops the bleeding and restores operations. RCA comes after, to determine why it happened and how to stop it recurring. Skipping RCA is why many organisations suffer the same breach twice.
A neutral third party investigates without bias and carries more weight with regulators, insurers and your board.