Glossary: Incident Response and Resilience

root cause

The deepest cause you can fix that would have prevented the incident or would stop it happening again. For Jo's laptop it was that nobody reviewed administrator rights.