Root cause
A root cause is the underlying reason a problem happened: the cause that, once removed, stops the problem coming back. The trigger and the symptom are not root causes. Corrective action is aimed at it, so a wrong root cause means a wasted fix and a repeat finding.
- Clauses
- ISO 27001:2022 10.2 · ISO 9001:2015 10.2 · ISO 13485:2016 8.5.2 · ISO 42001:2023 10.2
Where the term appears
None of the standards defines the term. ISO 27001:2022 10.2, ISO 9001:2015 10.2 and ISO 42001:2023 10.2 ask you to determine the causes of a nonconformity before deciding on corrective action, and ISO 13485:2016 8.5.2 makes determining causes part of its documented corrective action procedure. The plural matters: a problem can have several contributing causes, and the standards do not ask you to force them into one. The ISO 27001 improvement page shows where the cause sits in clause 10.
Why human error is rarely the answer
People make mistakes in every system. The question is why this system let the mistake through or made it likely: a confusing form, a missing check, an unrealistic workload. An auditor tests three things. Is the cause supported by evidence? Would removing it have stopped this occurrence? Does the corrective action address it, rather than retraining the person who happened to be there?
How Sted uses it
- Sted’s knowledge base includes a Corrective and Preventive Actions record template, under its Corrective and Preventive Action Procedure.
- Records are part of the Full Management System plan.
- Sted does not carry out root-cause analysis; it holds the record of yours.
Related terms
- Corrective action: the action a root cause decides.
- Nonconformity: the problem whose cause you are looking for.
- Correction: the fix that leaves the root cause in place.
- CAPA: the process where root-cause analysis sits in the middle.
- Root-cause analysis for a CAPA: five whys, fishbone diagrams and how to verify the cause.