---
title: Decide the treatment and perform a root cause analysis
description: Decide the treatment and perform a root cause analysis for the Operational vulnerability. After completing the action tasks, the vulnerability analyst devises the next course of treatment and updates their observations and analysis in the Details tab of the Operational vulnerability record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/deciding-treatment-analysis.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Managing Operational vulnerability, Manage, Operational Resilience, Governance, Risk, and Compliance]
---

# Decide the treatment and perform a root cause analysis

Decide the treatment and perform a root cause analysis for the Operational vulnerability. After completing the action tasks, the vulnerability analyst devises the next course of treatment and updates their observations and analysis in the **Details** tab of the Operational vulnerability record.

## Before you begin

Role required: sn\_oper\_res.manager

## Procedure

1.  Navigate to **Workspaces** > **Operational Resilience Workspace** > **All Operational Vulnerabilities**.

2.  Navigate to the vulnerability record and ensure that the action tasks are closed.

3.  Review the details of the vulnerability, select the **Discuss** action to collaborate with the participants, and plan the treatment.

4.  In the **Treatment decision** field, select one of the options and choose the treatment plan.

    The choices are as follows:

    -   **Accept**: Accept the vulnerability.
    -   **Avoid**: Avoid the vulnerability.
    -   **Mitigate**: Moderate the effect of the vulnerability.
    -   **Transfer**: Transfer the vulnerability to another department or function in the organization.
5.  In the **Root cause analysis** field, add observations and notes on the root cause.

    It is necessary to record the root cause and relevant details for future reference.

6.  Select **Save**.

    Details on the treatment and root cause analysis of the Operational vulnerability are saved in the record.