A Risk Manager Generally Uses Root-Cause Analysis to Investigate Incidents

Multiple Choice

A risk manager generally uses root-cause analysis to investigate incidents. What are the likely outcomes of this action? Note: Credit will be given only if all correct choices and no incorrect choices are selected. Select all that apply.

A) There is disagreement over the cause of the incident.
B) There are insufficient resources to make needed changes to prevent similar incidents.
C) The system or process causing the incident is identified and corrected.
D) Improvements to the system are widespread.
E) Sufficient evidence is acquired so that management is comfortable in making needed changes.