What is Security incident? Definition and explanations
A security incident is an event that actually compromises the confidentiality, integrity or availability of a system or of data. It differs from a security event, which is a mere observation, and from an alert, which is only a signal to qualify. The distinction is not academic: it triggers handling, logging and sometimes reporting obligations.
In one sentence
A security incident is an event that genuinely compromises a system or data.