Incidents rarely have one cause. Contributing factors are the missing validation, the missing alert and the slow dependency that had to line up. Listing them points at fixes in the system.