GRC uses the Systematic Cause Analysis Technique (known as SCAT) to identify and conduct effective investigations where elements within the Security and Safety structure have been absent of not adhered to. This is a top down and bottom up approach where Policies, Standards, Guidelines and methodology are observed, assessed as being fit for purpose and or its relevance.

Identifying where there has been oversight (either process of personnel) is important for the organization to work through an accountability process. This may mean systems, process of people.

SCAT Analysis Process:

1. Establish context in which breaches have been made
2. Work through “Immediate Causes”
3. Understand “Root Causes”
4. Lack of “Management System Controls”
5. Accounting the Loss
6. Accountability Matrix – who and what was at fault
7. Recommendations