PCDOE Managing incidents

After a corrupted-data incident, the technical trigger is known, but the team still does not understand why tests and reviews failed to catch it. Which analysis technique would best uncover that gap?

Show answer and explanation

Answer: C

The 5 Whys technique asks why repeatedly, usually about five times, so each answer reveals a deeper cause. Starting from a bad write, the chain might reach a missing validation test, and then a review checklist that never required one. The result points to systemic fixes instead of individual error. It works best combined with other evidence rather than as a rigid count.

Why the other options are wrong

  • A. Naming an author is what blameless postmortems avoid. It explains nothing about why the safeguards did not operate.
  • B. Deleting evidence removes the data needed for analysis and may breach customer or compliance obligations. It hides the problem rather than investigating it.
  • D. Changing the objective to fit the failure amounts to accepting the defect. It does not explain why the safeguards missed it.

Keep going. 200 PCDOE questions, answers explained after each one.

Practise managing incidents

Reviewed November 2026. Spotted a problem with this question? Report it from the practice tool.