The useful starting point

A why-chain helps organize questions. Evidence supports its answers. Leave gaps and branches visible instead of filling them to reach a predetermined endpoint.

Separate a question structure from proof

A why-chain moves from an outcome toward possible explanations. Each answer needs support; it is not validated by being the second, third, or fifth line. You can ask a useful question and still lack enough information to answer it. Keep that distinction visible instead of filling the next box with a plausible guess.

For study, add an evidence reference beside every proposed answer. Use unresolved when no supplied item supports the link. If one answer introduces two different possibilities, branch the questions rather than selecting whichever produces the neatest final sentence.

Compare two invented explanations

A fictional report says a notice was not available in a meeting room. The only supplied record is a photograph taken afterward showing an empty notice holder.

Chain A proposesChain B proposesWhat the packet establishes
A person forgot to post itThe notice was removed during a room changeNeither explanation is established
They forgot because training was poorIt was removed because ownership was unclearBoth links need evidence
More training is the answerA new owner is the answerThe proposed remedy depends on unresolved claims

The photograph supports an after-event condition. It cannot choose between these two chains.

Replace unsupported answers with discriminating questions

Ask whether the notice was prepared, when the holder was last known to contain it, and whether the room arrangement changed. Each answer could distinguish the competing explanations. Do not start by asking who forgot if forgetting has not been established. That wording turns a hypothesis into the premise of the next question.

Keep a branch when evidence supports more than one relevant factor. For example, a change process and unclear ownership might interact. Conversely, stop a branch when its premise is contradicted. The objective is a supported explanation, not a required number of boxes or a single dramatic endpoint.

Check whether the recommendation depends on a guess

Trace a proposed recommendation backward through the chain. If it relies on an unsupported training-gap claim, mark that dependence before accepting it. A recommendation may still address a separately established weakness, but its justification should state that weakness rather than borrow certainty from the chain.

In a practice question, be cautious when the only evidence is a final condition but the answer confidently assigns a motive several steps earlier. Write what additional item would support the missing link. This makes the exercise useful even when the correct result is that the case does not yet establish a root cause.

Try it yourself

Check your reasoning.

You have written five plausible answers, but only the first has a source. Is the final answer a confirmed root cause?

Open the suggested reasoning

No. The unsupported links remain hypotheses. Identify evidence that could test them, branch alternatives where necessary, and avoid making the number of why questions a substitute for support.

An original learning exercise from NCSO Prep, not an official exam question.

Keep the next step useful

Put this guide to work.

Test your investigation reasoning

Sources and scope

Source review: . The examples and study methods are NCSO Prep editorial material. Official requirements and workplace decisions must be checked against the applicable current source.