ABSTRACT
Identifying the root cause of any set of risks means that those causes, no matter how ingrained in an organization, can be recognized as separate and distinct causes of risk. They are the drivers and the contributory factors for making risk events come to pass. The key to root cause identification is to find those causes that are truly at the heart of driving risk. Root cause identification and analysis does not seek to discover what may occur or how it may occur. Instead, the emphasis is on why a given set of risks may occur (and as a result, it should be able to address that why in terms of ensuring that it is recognized and dealt with).
