What is the primary purpose of conducting root cause analysis during post-incident activities?
To analyze the effectiveness of existing security controls
To determine the immediate impact on business operations
To identify the underlying causes of the incident
To compile evidence for legal proceedings