Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Glossary
A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  J  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X  |  Y  |  Z

Cybersecurity Incident

Abbreviations / Acronyms / Synonyms:

Computer Security Incident
incident

Definitions:

  An occurrence that actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
Sources:
CNSSI 4009-2022 under incident from 44 U.S.C., Sec. 3552

  Anomalous or unexpected event, set of events, condition, or situation at any time during the life cycle of a project, product, service, or system.
Sources:
NIST SP 800-160v1r1 under incident from ISO/IEC/IEEE 15288:2015

  An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
Sources:
NIST SP 800-171r3 under incident from 44 U.S.C., Sec. 3552
NIST SP 800-37 Rev. 2 under incident from 44 U.S.C., Sec. 3552
NIST SP 800-53 Rev. 5 under incident from PL 113-283 (FISMA)

  An occurrence that actually or potentially jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
Sources:
NIST SP 800-128 under incident from 44 U.S.C., Sec. 3552

  An occurrence that actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
Sources:
NIST SP 800-61r3 under cybersecurity incident from PL 113-283 (FISMA)

  An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
Sources:
NIST SP 800-172r3 under incident from GAO-19-128

  A cybersecurity event that has been determined to have an impact on the organization prompting the need for response and recovery.
Sources:
NIST Cybersecurity Framework Version 1.1
NIST Privacy Framework Version 1.0 from NIST Cybersecurity Framework Version 1.1

  An occurrence that (1) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (2) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
Sources:
NIST Privacy Framework Version 1.0 from OMB M-17-12