Hi all, working on problem and incident mgmt i need some suggestions for clustering and classifying the root causes which have made the incidents happen.
I have supposed a classification/clustering as follows:
- application root causes
- infrastructure root causes
- security root causes
-third party /vendor issues
- lack of monitoring.
Could you suggest how could I better identify the main categories for this topic? ideally what I'd like to realize is a classification that could help as knowledge base, so that if a new incident happens, I can search if something similar already has happened and reduce the resolution time.
Thank you in advance if someone could help me