Definition
A Security Incident is an Incident that leads or may lead to a breach of the confidentiality, integrity, availability or authenticity of information, systems or services.
Human Explanation
It is an Incident involving information or system security that requires appropriate analysis and response.
Why it Matters
Correctly identifying a Security Incident enables rapid containment of the Threat and reduction of its impact.
Conceptual Boundary
Not every security event is an Incident. A Security Incident is a confirmed or highly probable breach that requires action.
Practical Perspective
The critical step is moving quickly from detection to confirmation and beginning actions that limit the Incident's impact.