Watch this video on YouTube
What is the PRIMARY reason to determine the root cause of an IT security incident?