easy5 pts · first answer countsincident-responsepost-incidentroot-cause
The five whys
In a postmortem, the team asks "why?" repeatedly: why did the site go down, why did the config break, why was it not caught in review, and so on. What is this technique called?
Discussion 0
Join free to post in the discussion.
Related questions
- Backups that survive ransomwareCybersecurity Analyst
- Why chain of custody mattersCybersecurity Analyst
- Security event or security incidentCybersecurity Analyst
- What makes malware a trojanCybersecurity Analyst
- Double extortion ransomwareCybersecurity Analyst
- What a rootkit is forCybersecurity Analyst
- What an infostealer takesCybersecurity Analyst
- What fileless malware meansCybersecurity Analyst