The authors outline a six-step process for root cause analysis and highlight the importance of understanding state disclosure and discovery laws when investigating critical incidents.