Glossary: Incident Response and Resilience

direct cause

What directly made an incident happen, such as malware running on Jo's laptop. It lies between the symptom you saw and the deeper root cause.