Glossary: Security Operations and Incident Response

Root cause analysis (RCA)

Also written: RCA, root cause, symptom

Finding the deepest reason an incident happened, the one that stops it recurring once fixed, rather than the symptom you saw (an encrypted laptop).