After you have talked to the customer, you can establish a theory of probable causes. The figure shows a list of some common probable causes for security problems.