How to define the root cause classification

[Andrea Rivolta]

Hi all, working on problem and incident mgmt i need some suggestions for clustering and classifying the root causes which have made the incidents happen.

I have supposed a classification/clustering as follows:

- application root causes

- infrastructure root causes 

- security root causes

-third party /vendor issues

- lack of monitoring.

Could you suggest how could I better identify the main categories for this topic? ideally what I'd like to realize is a classification that could help as knowledge base, so that if a new incident happens, I can search if something similar already has happened and reduce the resolution time.

Thank you in advance if someone could help me

[Nic Brough -Adaptavist-]

There's not a lot we can tell you here.  A better set of options needs to be determined by the people who are using it.  I would look at your reports and ask what you actually want from them.