Which process involves diagnosing the origins of events, which can be used for learning from errors and problems?

Which process involves diagnosing the origins of events, which can be used for learning from errors and problems?

• A. Root cause analysis
• B. Business case
• C. Penetration test
• D. Continuous risk and control monitoring

Answer: (A)

Root cause analysis focuses on identifying the underlying causes of events, so organizations can learn from mistakes and prevent recurrence. In IT risk management, when an incident occurs, this approach digs beyond the surface symptoms to find what in processes, controls, or human factors allowed the event to happen, then guides targeted corrective actions. Techniques like the 5 Whys or fishbone diagrams help teams trace a problem back to its fundamental driver, enabling meaningful improvements and preventing similar issues in the future.

The other options address different aims. A business case is about justifying a project’s value and viability, not diagnosing why an incident occurred. A penetration test evaluates security by simulating attacks to reveal vulnerabilities, not the origins of a past event. Continuous risk and control monitoring focuses on ongoing oversight of risk posture and control performance, not the retrospective analysis of an individual error to inform learning and root fixes.