First verify what is being counted

Reports may contain duplicates, different diagnoses, or inconsistent dates. A clear case definition and review of records help establish whether the apparent grouping is real and comparable.

The expected background frequency also matters. A handful of rare events can mean something different from the same number of common events in a large population.

The boundary can be chosen after seeing the cases

Drawing a very specific area and time window around observed cases can make the grouping look unusually concentrated. Investigators need to consider how the cluster was identified and avoid treating a post hoc boundary as if it had been specified in advance.

Build and test explanations

The sequence may overlap in an urgent investigation; protective action can be needed before every question is settled.

Communicate what is known and what remains under investigation. Taking a community concern seriously does not require announcing a cause prematurely. A careful investigation can validate the concern as worth examining while keeping the causal conclusion open.