Security incident
An event that actually or potentially compromises security objectives or violates security policy and requires evaluation.
In practice
Define severity, escalation, containment, communication, evidence preservation, and post-incident review procedures.
Common confusion
Not every alert is an incident, and not every security incident is a legally reportable breach.