Comprehensive and Detailed Explanation From Exact Extract:
The Incident Cause Analysis Method (ICAM) is a root cause analysis technique used across various industries, including cybersecurity, to understand underlying issues behind incidents. It promotes a holistic and structured approach by examining five critical dimensions:
People (human error, behavior, awareness)
Environment (physical or digital conditions)
Equipment (hardware, software, tools)
Procedures (policies, guidelines, workflows)
Organization (culture, leadership, resourcing)
This comprehensive model helps organizations identify both immediate and systemic causes, allowing them to implement more effective corrective actions and prevent recurrence.
Reference:
ICAM Framework (adapted for cyber from industrial safety): "The ICAM methodology provides a structured approach to incident analysis using five contributing factor categories." ISO/IEC 27035-2 supports root cause analysis practices as part of the post-incident review (Clause 6.4.7).
Correct answer: A
-