CISM Incident Management Practice Question
During a post-incident root cause analysis, the team uses the '5 Whys' technique and identifies a technical vulnerability as the cause. According to CISM best practices, what should be the NEXT level of analysis?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Determine the process failure that allowed the vulnerability to go unaddressed.
The '5 Whys' should drill deeper to uncover process and management failures that allowed the technical vulnerability to exist.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Determine the process failure that allowed the vulnerability to go unaddressed.
Why this is correct
Understanding the process gap helps prevent recurrence.
- ✗
Immediately patch the vulnerability and move on.
Why it's wrong here
Patching is important but does not address the underlying process failure.
- ✗
Escalate the issue to the vendor for a software fix.
Why it's wrong here
This may be part of remediation but does not get to the root cause of why the vulnerability was not fixed earlier.
- ✗
Identify the specific employee responsible for the vulnerability.
Why it's wrong here
Root cause analysis focuses on systemic issues, not individual blame.
Go deeper
Related to this question
About these practice questions
One of 871 original CISM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.