Enterprise risk & controls · Core
Root cause
Also called: underlying cause
ELI5
The underlying factor that allowed a problem or event to occur.
Used in conversation
“The control is not complete until we can evidence how root cause is monitored.”
Pitch context
You will see “Root cause” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.
Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.
Caution
Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.
Sources & evidence · 4
Direct term-level sources and supporting source families.
- National Institute of Standards and Technology — Computer Security Resource Center GlossaryDirect source · primary · checked 2026-08-16
- OECD — G20/OECD Principles of Corporate Governance 2023Direct source · institutional · checked 2026-08-16
- Scrum Guides — The Scrum Guide — official current versionSupporting source family · primary · checked 2026-08-16
- U.S. Securities and Exchange Commission — EDGAR and filing resourcesSupporting source family · primary · checked 2026-08-16