Dr. Wallace's Favorite Mental Models

The Iceberg Model

A systems-thinking tool for tracing a visible problem down to the hidden structures and beliefs that keep producing it.

Systems Thinking Root-Cause Analysis ~10 min read

1Fast Overview

What it is, in about thirty seconds.

Most problems you can see are just the tip of something much bigger.

The Iceberg Model says that any visible event (a customer complaint, a missed deadline, an employee quitting) is held up by three hidden layers underneath it: a repeating pattern, a structure that produces that pattern, and a mental model — the beliefs and assumptions that built the structure in the first place.

  • Fixing the event alone rarely fixes anything for long.
  • Real leverage sits lower in the iceberg, where one change affects many future events.
  • It is a question-asking tool, not a formula — you work down the layers by asking "why does this keep happening?" at each level.
  • Used widely in organizational development, public health, education, and policy work.

2Mental Model Compass

Where this model earns its keep, at a glance.

Root-Cause Depth Systemic View Predictive Power Collaboration Value Speed of Use
Root-Cause Depth9.5 / 10
Systemic View9 / 10
Collaboration Value7.5 / 10
Predictive Power6.5 / 10
Speed of Use3.5 / 10

This model is slow and reflective by design. Reach for it when a problem keeps recurring — not when you need an answer in the next five minutes.

3Learn It: The Four Layers

Work through each layer in order. Click a tab, read the question it asks, then move to the next.

Events — what just happened

The visible tip. A single occurrence you can point to: a good employee resigned, a server went down, a customer churned, a shipment arrived late. Events are loud, specific, and easy to react to — which is exactly why most organizations stop here.

Ask: "What happened, exactly, and when?"

Patterns — what keeps happening

Zoom out across time. Is this event part of a trend? Plot the last six, twelve, or twenty-four months: do resignations cluster after a certain milestone, do outages spike on deploy days, does churn rise in the second month of a subscription? A pattern turns one data point into a signal worth investigating.

Ask: "Has this happened before, and does it follow a shape over time?"

Structures — what's producing the pattern

Structures are the systems, incentives, policies, workflows, and relationships that make the pattern almost inevitable given how things are currently set up. A thin onboarding process, a bonus plan that rewards speed over quality, a review step nobody owns — these are structures. They are harder to see than events because no single person "decided" them; they accumulated.

Ask: "What in the way this system is built makes this pattern likely to keep recurring?"

Mental Models — what beliefs built the structure

The deepest and least visible layer: the shared assumptions, values, and unspoken rules that led people to build the structure that way in the first place. "Good employees don't need hand-holding." "Speed to market matters more than polish." "Customers who leave just weren't a good fit." These beliefs feel like facts from the inside — that's what makes them hard to question.

Ask: "What would someone have to believe for this structure to seem like a reasonable idea?"
Quick check: A team notices that three good hires in a row quit within their first ninety days. Someone says, "Let's just hire faster to backfill." What layer does that response operate on?

4Diverse Examples

The same four layers, applied across very different situations.

Event
A rising star on the sales team resigns with no warning, citing "a better opportunity."
Pattern
HR data shows four of the last seven departures also happened between months four and six of tenure — right after the first performance cycle.
Structure
New hires get a strong onboarding week, then are handed a quota with no scheduled manager check-ins until the formal six-month review.
Mental Model
Leadership believes "real performers figure it out on their own" and treats frequent check-ins as coddling rather than support.
Event
A cluster of food-poisoning cases is reported at a regional hospital in one week.
Pattern
Similar small clusters appear every summer in the same three counties.
Structure
Local food-safety inspections are scheduled annually and understaffed during the exact season when outdoor food vendors multiply.
Mental Model
Budget planners assume food safety is a "steady-state" risk that doesn't need seasonal resourcing.
Event
A flagship feature launch gets a wave of one-star reviews in its first week.
Pattern
The last three major launches all saw a quality dip in the final two weeks before ship.
Structure
Launch dates are fixed at the start of the quarter and communicated externally before scope is finalized, so QA time is always what gets cut when things run late.
Mental Model
Leadership equates "shipping on the announced date" with credibility, more than it equates quality with credibility.
Event
You skip the gym again on a Tuesday evening after a long day.
Pattern
You skip almost every session that's scheduled for after 6pm, regardless of the day.
Structure
Your only open calendar slot for exercise is in the evening, competing directly with decision fatigue, dinner, and family time.
Mental Model
You believe "discipline" should be able to override a schedule that was never realistic in the first place.

5Worked Application

A full walkthrough: a mid-size software team with a recurring on-call problem.

1

Name the event precisely

Last Friday, a payment-processing bug reached production and stayed live for six hours before anyone on the on-call rotation noticed. Write down exactly what happened, when, and who was involved — resist the urge to explain it yet.

2

Pull the history and look for a pattern

Checking the last six incident reports: four of six "slow to notice" incidents happened on a Friday or over a weekend. The pattern isn't "we have bugs" — it's "we are specifically slow to detect and respond outside core business hours."

3

Map the structure that produces that pattern

The on-call rotation is staffed by only two engineers for the whole weekend, alert thresholds were tuned for weekday traffic volume, and there is no written weekend escalation path — so a quiet alert waits for someone to happen to check their phone.

4

Surface the mental model underneath the structure

When asked directly, the engineering lead says, "Weekends are low-traffic, so it's not worth the overtime cost to staff them like weekdays." That belief — reasonable on its surface — is what's actually keeping the thin coverage in place.

5

Choose where to intervene, and why

Patching the one bug (the event) fixes nothing structural. Rewriting the escalation policy (the structure) helps, but will quietly erode again if the underlying belief about weekend risk never changes. The highest-leverage move is updating the mental model itself — reframing weekend incidents by their customer-trust cost, not just their staffing cost — and then letting that new belief drive a resourcing decision that actually sticks.

6Common Mistakes

Where this model usually goes wrong in practice.

Stopping at the event

Treating the visible incident as the whole problem and closing the loop once it's patched, without ever asking whether it will recur.

Calling a structure a mental model (or vice versa)

A policy, incentive, or process is a structure — something built and changeable. A belief is what justified building it that way. Confusing the two means fixing the wrong thing.

Assigning blame instead of tracing structure

"Who caused this" is an event-level question. The iceberg model works best when it's used to find leverage, not to find someone to fault.

Diagnosing alone

Mental models are, by definition, the assumptions one person doesn't notice they're making. A single analyst often can't see their own team's deepest layer — it usually takes someone with a different vantage point.

Trying to fix every layer at once

Going all the way to mental models every time is overkill for small or one-off issues. Match the depth of the dig to how much the problem actually recurs.

Treating the model as strictly linear

In practice the layers interact and loop back on each other. Use the four layers as a set of lenses to apply in sequence, not a rigid flowchart with one right path.

7When Not to Use It

This model trades speed for depth. Skip it, or use it lightly, when:

  • The problem is genuinely a one-off. A single vendor shipped a defective part once; there's no pattern yet to analyze.
  • You're in the middle of a live crisis. Mid-incident, you need to stop the bleeding first. Save the layered analysis for the retrospective afterward.
  • You don't have enough history to see a pattern. Without at least a few data points over time, "the pattern" layer is just a guess dressed up as analysis.
  • The fix is cheap, safe, and doesn't need structural change. Not every event justifies an excavation. Sometimes the tip of the iceberg really is small enough to just melt on its own.
  • You lack the standing to question the structure. If you can diagnose a deep structural or cultural cause but have no ability to act on it, surfacing it without a plan can create frustration rather than leverage.

9Try It Yourself

Describe a recurring problem below. This builds a short, structured prompt you can paste into any AI assistant — or work through yourself on paper.

10Save as Skill

Turn this model into a reusable instruction set your AI assistant can apply any time, plus a one-off prompt for your current problem.

iceberg-model.md

A portable instruction set. Copy it, download it, or paste its contents directly to any AI assistant that accepts custom instructions or files.


        
Copied!