September 28, 2024

The Power of the 5 Whys: Uncovering Root Causes

Cloud computing, microservices, agile – they were supposed to make things quicker to deliver, simpler to build and faster to scale – and for the most part they have delivered on all these promises and more.

However, even though they claim to make things simpler we would argue that the world that we now live in seems to be more fragile and brittle because the systems that are being built are more complex as a whole and individual people don’t necessarily see or understand the overall picture.

Where we operate in the cybersecurity, infrastructure and cloud space, we acknowledge that different people believe they know what is going on. The enterprise architect or strategist uses tools and methods to define how things should hang together, they define patterns, principles and standards and then implement governance processes to make sure everything is implemented according to these plans.

The solution architect takes their slice of the architecture and breaks it down so that an individual solution is better defined – what functionality will be implemented, what technology will be used, what trade-offs need to be made. This then gets interpreted by the engineer or developer to implement. It should all work but often it doesn’t. When it doesn’t work, we need a way of getting to the root cause or causes quickly so we can implement sustainable and long-term solutions.

One simple technique that we recommend at Cordant is the ‘5 Whys technique’ developed by Sakichi Toyoda, the founder of Toyota Industries in the 1930s. Whilst there are other methods and tools (e.g FMEA, Fishbone Diagrams) that can be used, the 5 Whys technique is a simple technique that can be used in many situations to get to the underlying causes of problems and identify actions to resolve them.

So, what is the 5 Whys Technique?

It’s a straightforward problem-solving method that involves asking “Why?” five times (or more) to drill down into the root cause of an issue. Each answer forms the basis of the next question, creating a chain of inquiry that leads to the core problem.

If anyone has been faced with a 5-year-old asking a question it will be familiar territory although children don’t tend to stop at 5 Whys!

How to Use the 5 Whys

  1. Identify the Problem: Clearly define the issue you’re facing. Be specific and concise.
  2. Ask the First Why: Why did this problem occur? Record the answer.
  3. Ask the Second Why: Based on the first answer, ask why that happened. Continue this process.
  4. Repeat Until the Root Cause is Found: Typically, this takes about five iterations, but it can be more or fewer depending on the complexity of the problem.
  5. Address the Root Cause: Once the root cause is identified, develop a plan to address it and prevent recurrence.

Each problem may not be linear in nature and therefore there may be branches after each why question. These should then be followed down to their conclusion leading to multiple root causes and different treatment plans.

Example of the 5 Whys in Action

Let us say a company has been impacted by a cybersecurity breach:

  1. Why did the cybersecurity breach occur?
    Because an employee clicked on a phishing email.
  2. Why did the employee click on the phishing email?
    Because they did not recognise it as a phishing attempt.
  3. Why did they not recognise it as a phishing attempt?
    Because they had not received adequate training on identifying phishing emails.
  4. Why had they not received adequate training?
    Because the company does not have a comprehensive cybersecurity training program.
  5. Why does the company not have a comprehensive cybersecurity training program?
    Because there is no dedicated budget or resources allocated for cybersecurity training.

So, in this example, the company might resolve this problem by allocating a budget for cybersecurity training, creating, or purchasing training materials, training their employees, and then running regular phishing simulations to test employee understanding.

By asking “Why?” five times, the company discovers that the root cause of the cybersecurity breach is the lack of a comprehensive training program, not just the employee’s mistake.

Benefits of the 5 Whys Technique

This is a simple technique to use. It can be done to help problem solve in the moment (e.g. during an incident) or after the problem has occurred so that the right fix can be applied.

The following are some of the key benefits that can be realised from applying this technique to solve your business problems.

  1. It is simple: The 5 Whys is easy to understand and implement, requiring no complex tools or training.
  2. It focuses on root causes: It helps teams move beyond symptoms to identify and address the underlying issues.
  3. It promotes team collaboration: Involving team members in the process fosters a collaborative approach to problem-solving.
  4. It prevents recurrence: By addressing the root cause, the 5 Whys helps prevent the problem from happening again.
  5. It is versatile: This technique can be applied to a wide range of problems in various industries.

Conclusion

At Cordant, we use techniques like the 5 whys to get to the root cause of problems whilst simultaneously irritating members of the team by mimicking their children (joke).

It is an extremely effective technique that allows teams to move beyond surface-level symptoms and develop effective solutions that prevent issues from recurring.

Whether you have a cybersecurity, infrastructure, or cloud problem to solve, this technique can help you uncover answers to your problems in a systematic and structured way. Why not give it a go.

Share Article

What we believe

Company

Support

Menu

Contact

(03) 9005 2399
L16, 440 Collins Street, Melbourne, Victoria 3000
© 2024 Cordant. All rights reserved