Information Technology Reference
In-Depth Information
n
Why
: Why activity was occurring during which the incident happened (e.g.,
routine maintenance, production service running as usual, new software
installation, etc.).
When
: Date, time; include significance (e.g., end of quarter, end of month,
holiday season).
Where
: Address, building, floor, room, system/technology.
How
: Describe the symptoms surrounding the incident (e.g., testing of new
application brought down the production server).
n
n
n
Activity Sequence/Chronology Leading to Event
Table H.4 presents a chronology of significant events leading up to and beyond the
event.
table H.4
eent Sequence
Activity
Date
Time
Comments
Note in the “Comments” column whether the activity is contributory, noncon-
tributory, or of indeterminate relationship to the event.
Information Gathered during RCA Process
TBD
People Interviewed during RCA Process
TBD
