Skip to content

Academy / Chapter 03 / Applied investigations

Practice on problemsthat look real.

Four fictional professional scenarios. Every number, system, company and outcome below is invented for training—not a claim about real organizations or verified incidents.

NEW / GUIDED INVESTIGATIONS_

Prefer to uncover the answer yourself?

The professional Case Files show worked conclusions. The Evidence Lab offers three staged fictional investigations where you inspect evidence, choose a reasoning path and reveal feedback without submitting anything.

CASE DIRECTORY_

Four situations. Four different questions.

CASE P01 / SERVICE OPERATIONS

The 14:00 payment failure

Recurring incidents, a discriminating test and an imperfect workaround.

Read payment case →
CASE P02 / OPERATIONS QUALITY

The warehouse defect spike

Prioritize the recurring burden without assuming a Pareto bar is the cause.

Read warehouse case →
CASE P03 / FACILITIES

The north-zone temperature drift

Compare what is and is not affected before choosing a repair.

Read facilities case →
CASE P04 / DECISION ANALYSIS

The migration trade-off

Separate required conditions, preferences and downside risk.

Read migration case →

CASE P01 / 5 WHYS + EVIDENCE TESTS

The 14:00 payment failure

Initial deviation. A fictional payment service reaches 8.0% failed authorizations between 14:00 and 14:08 on four weekdays, against a 0.2% normal failure rate. Other time windows remain normal.

8.0%PEAK FAILURE RATE
4RECENT WEEKDAYS
29BLOCKED DB SESSIONS
0.2%NORMAL BASELINE

Evidence versus assumptions

SignalClassificationReason
Failed requests and database lock waits rise in the same interval.ObservedTimestamped metrics and logs.
The export/report job starts at 14:00 on affected days.ObservedScheduler event records.
The report job causes the payment failures.HypothesisTiming alone does not establish causation.
A missing concurrency limit allowed the report to occupy payment resources.Working explanationRequires a controlled test and code/configuration review.

Test, containment and decision

Under a controlled test, postponing the report while leaving payment demand comparable coincides with a return to baseline, and reproducing the report under staging-like load recreates similar contention. This strengthens the hypothesis, although monitoring should continue for alternative causes.

Workaround: postpone the scheduled report with clear ownership and a business-impact warning. Durable control: isolate workload capacity or enforce concurrency and lock-duration controls. Verification: compare 14 comparable peak windows before and after, reviewing failure rate, job completion and lock duration.

LEARNING POINT_

Restoring transactions is incident recovery. Establishing why the job caused contention and designing an independently verified control is problem management.

CASE P02 / PARETO → FISHBONE

The warehouse defect spike

Initial deviation. Over one fictional month, an outbound warehouse records 200 defect reports. The team wants to “fix everything” but has only one improvement cycle available.

Defect categoryReportsShareCumulative
Wrong item picked9246%46%
Missing item4824%70%
Label mismatch3015%85%
Package damage2010%95%
Other105%100%

What Pareto says—and does not say

The first three categories account for 85% of recorded events. This is a useful starting priority for further analysis. But these are counts, not costs, safety severity or validated causes. Different exposures or under-reporting could change the ranking.

Next evidence pass

The team samples 30 wrong-item reports, compares shifts and zones, and maps candidate causes with Fishbone: ambiguous shelf layout, scanner latency, training gaps, substitute item labelling and workload peaks. A test on one affected zone supports shelf placement as one contributor, but it does not rule out the other branches.

Control: trial a clearer placement and independent scan confirmation in one zone. Verification: compare errors per 1,000 lines picked—not just raw counts—and include labor time and new failure modes.

LEARNING POINT_

The largest category is the best place to investigate next, not necessarily the easiest or best place to invest. Compare severity and controllability before deciding.

CASE P03 / KEPNER–TREGOE PROBLEM ANALYSIS

The north-zone temperature drift

Initial deviation. A fictional office building's north-zone meeting rooms are 3–4°C warmer than set point after 13:00. South-zone rooms are normal, and the north zone was normal until a recent maintenance visit.

DimensionISIS NOT
WhatNorth-zone supply temperature above expectedAll building zones failing
WhereNorth rooms on one air-handler branchSouth-zone rooms
WhenAfter 13:00 since maintenanceBefore midday and before maintenance
Extent3–4°C excess during afternoon loadTotal loss of cooling

Distinction, change and test

Review differences between the two branches and changes made during maintenance. One plausible cause is a reversed actuator control signal installed in the north-zone valve. But being the newest change is not proof.

A qualified technician verifies command versus physical valve position under controlled safe conditions, finding reverse movement on the affected branch while the comparison branch responds correctly. Workaround: controlled set-point and occupancy adjustment within safe limits. Correction: restore the correct control direction under change control.

Verification: compare time-at-set-point over a representative week and monitor for unintended humidity and energy consequences.

LEARNING POINT_

IS/IS NOT narrows the test. Do not repair solely because a recent change appears suspicious, especially in systems requiring licensed or qualified personnel.

CASE P04 / KEPNER–TREGOE DECISION ANALYSIS

The migration trade-off

Decision to make. A fictional team must move a reporting workload. The two technically eligible options are a managed service and a self-hosted platform. Another option fails mandatory residency requirements and is rejected before scoring.

Keep MUSTs different from WANTs

MUST: meet the data residency requirement, meet the recovery objective and have an independently supported export route. The options that fail a MUST do not earn eligibility through high preference scores.

Weighted WANTWeightManaged (1–5)Self-hosted (1–5)
Operational simplicity552
Cost predictability434
Customization325
Recovery operations443
Illustrative weighted total165953

The managed option scores 59 against 53 using these invented weights and scores. Those values are judgments, not measured probabilities. A sensitivity test asks whether changing the weight of customization, or discovering a new vendor dependency, would reverse the preference.

Decision condition: proceed only if the vendor's exit test and recovery drill meet the MUSTs. Potential problem: higher switching cost if the export path fails in practice. Protective action: conduct a pilot extraction and rollback rehearsal before commitment.

LEARNING POINT_

Decision scoring makes trade-offs visible. It cannot make preferences objective, guarantee success or replace checking downside risks.

TRANSFER YOUR LEARNING_

What is common to all four cases?

  • A clear observed deviation precedes the theory.
  • Competing explanations are acknowledged rather than erased.
  • A workaround is separated from a corrective control.
  • A discriminating test is stronger than a persuasive story.
  • Closure depends on verified results, not a completed checklist.
Next / Chapter 04: Practice your reasoning

Use eight reasoning challenges with worked explanations.

Start practice →