Information Technology Reference
In-Depth Information
n
Coincidence—The occurrence of events that chance to happen at the same
time but seem to have some connection.
Correlation—A relation existing between actions or events that occur together
in such a way not attributable only to chance. Event A may not cause event
B, but other events or circumstances may result in events A and B occurring
together.
Contribution—The occurrence of one event (A) is not causal but contribu-
tory to event B; event A is necessary but not sufficient to cause or predict
event B.
Control—Event A has power or control over event B; event A is not the cause
of event B, but influences it. Given the absence of event A, event B would still
exist, but in a different state or behavior.
Cultural—The relationship between events A and B is a cultural relationship
such that the relationship is specific to a particular culture or society, but not
to another.
Convention—The relationship between events A and B is one of convention
or social expectation; there is no cause and effect outside the conventional
expectation for the fulfillment of the relationship.
Conditioned—The cause and effect is not a natural occurrence, but one that
is conditioned, e.g., Pavlov's dog (B) salivates at the ring of a bell (A).
n
n
n
n
n
n
IA addresses risks. The process of discerning and understanding risk comes
from historical details. Similar unfolding of events today that correspond to previ-
ous events may predict a pending security incident. One of the many benefits of a
root cause analysis (RCA) is to understand the relationship between events. Does
the occurrence of one event indeed cause another or predict another?
14.3.2.7 Chaos
In the future thought framework, there must be consideration to unpredictabil-
ity. There is always the opportunity for the random factor of a natural event, the
unpredictable action of a person or of a group. Random influences inherent in
chaos include political events (e.g., election, terrorist event, war), natural events
(e.g., tsunami), or an opportunity to exercise personal control or pursue personal
advancement of position or cause (e.g., office politics).
The organization cannot control chaos and cannot even influence chaos. How-
ever, the organization may control its response to chaotic events. For example, the
results of the December 2004 tsunami include increased awareness of such events
and the need for coastline safeguards against natural occurrences. The tsunami is
the result of an earthquake, the root cause of which is available via seismic research.
A seismic early-warning system is one of many natural-risk early-warning services
that may feed into a NOC or SOC.
