incident

{
  "id": "MLC-T-CYB-002071",
  "term": "incident",
  "field": "Cybersecurity",
  "definition": "1. An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.\n\n2. An occurrence that actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.\n\n3. An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies\n\n4. Anomalous or unexpected event, set of events, condition, or situation at any time during the life cycle of a project, product, service, or system.\n\n5. See incident.\n\n6. Actions taken through the use of an information system or network that result in an actual or potentially adverse effect on an information system, network, and/or the information residing therein.\n\n7. An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.\n\n8. An occurrence that actually or potentially jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.\n\n9. An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.",
  "synonyms": [
    "computer security incident",
    "cyber incident",
    "cybersecurity incident",
    "cyberspace incident",
    "security incident"
  ],
  "references": [
    "FIPS 200; NIST SP 800-12 Rev. 1 from FIPS 200; NIST SP 800-128 from FIPS 200; NIST SP 800-137 from FIPS 200; NISTIR 8183 from NIST Cybersecurity Framework Version 1.1, NIST Cybersecurity Framework Version 1.0; NISTIR 8183 Rev. 1 from NIST Cybersecurity Framework Version 1.1; NISTIR 8183A Vol. 1 from NIST Cybersecurity Framework Version 1.1; NISTIR 8183A Vol. 2 from NIST Cybersecurity Framework Version 1.1; NISTIR 8183A Vol. 3 from NIST Cybersecurity Framework Version 1.1",
    "CNSSI 4009-2022 from 44 U.S.C., Sec. 3552; NIST SP 800-61r3 from PL 113-283 (FISMA)",
    "NIST SP 800-82r3 from FIPS 200",
    "NIST SP 800-160v1r1 from ISO/IEC/IEEE 15288:2015",
    "NIST SP 800-137",
    "NIST SP 800-160 Vol. 2 Rev. 1 from CNSSI 4009-2022",
    "NIST SP 800-171r3 from 44 U.S.C., Sec. 3552; NIST SP 800-37 Rev. 2 from 44 U.S.C., Sec. 3552; NIST SP 800-53 Rev. 5 from PL 113-283 (FISMA)",
    "NIST SP 800-128 from 44 U.S.C., Sec. 3552",
    "NIST SP 800-172r3 from GAO-19-128",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/incident/"
}