Incident

An unplanned occurrence (natural, technological, or human-made) that necessitates a response to protect life, property, critical infrastructure, or environment.

An occurrence that:

• Actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or
• Constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

This Order and its Appendices use the term “incident” as the broader term for a situation involving information or information systems. Not all incidents are breaches.