Root Cause Analysis Tools

Root cause analysis (RCA) in incident management is the process of discovering the root causes of a security incident in order to identify or select appropriate security measures.

• Pareto Analysis
• Fishbone Diagram
• 5-Why Analysis
• Fault Tree Analysis (FTA)
• Affinity Diagram
• Failure Mode & Effects Analysis (FMEA)
• Scatter Diagram

Some benefits of performing root cause analysis in incident response process may include:

• Targeting the main security threat not the symptom
• Figuring out permanent solutions to recurring security incidents
• Unravel the source of a security incident
• Planned and procedural approach to incident handling
• Standardize incident response processes