< Intel Library

Security incident

What is Security incident? Plain-language definition from the CybrCrime Intel Library.

A security incident is any event that might harm the confidentiality, integrity or availability of an organisation's information or systems. In plain words: something that might let data leak, be changed, or become unavailable. Examples include clicking a malicious link, entering a password on a fake page, a lost laptop, an email sent to the wrong person, an unexpected login prompt, or strange behaviour on a computer. Not every incident turns out to be serious, and that is fine. Security teams would much rather investigate ten false alarms than miss one real attack. The most important thing an employee can do is report suspected incidents quickly through the official route, without fear of blame.