What outputs are produced by a root-cause analysis after a cyber-physical incident?

What outputs are produced by a root-cause analysis after a cyber-physical incident?

• A. A reboot of all systems
• B. A report detailing root cause, corrective actions, and prevention measures
• C. A list of exploited vulnerabilities only
• D. A new network diagram

Answer: (B)

Root-cause analysis after a cyber-physical incident focuses on understanding what happened and why, so you can prevent it from recurring. The best output is a formal report that identifies the root cause, prescribes corrective actions to fix the underlying issue, and outlines measures to prevent future incidents. This three-part result ensures you address both the immediate gaps and the systemic weaknesses. Rebooting all systems is what you do to recover during incident response, not the analysis’s deliverable. Listing exploited vulnerabilities alone misses the broader factors (process, people, controls) that a root-cause analysis aims to address and doesn’t spell out the preventive steps. A new network diagram might be useful as part of the investigative artifacts, but by itself it doesn’t capture root cause or the recommended preventive actions.

Root-cause analysis after a cyber-physical incident focuses on understanding what happened and why, so you can prevent it from recurring. The best output is a formal report that identifies the root cause, prescribes corrective actions to fix the underlying issue, and outlines measures to prevent future incidents. This three-part result ensures you address both the immediate gaps and the systemic weaknesses.

Rebooting all systems is what you do to recover during incident response, not the analysis’s deliverable. Listing exploited vulnerabilities alone misses the broader factors (process, people, controls) that a root-cause analysis aims to address and doesn’t spell out the preventive steps. A new network diagram might be useful as part of the investigative artifacts, but by itself it doesn’t capture root cause or the recommended preventive actions.