An incident is a suspicious activity from unwanted sources, whereas a single event, or a collection of connected events, can result in an alert, signaling that there is suspicious activity.