Deciding if causality has been established depends on how consistent the patterns are in the data gathered by the auditors.
In case studies, the criterion for deciding whether casuality has been established is the coherence of the evidence, its consistency with the patterns ascribed to it, and its inconsistency with other explanations.