An event that could potentially harm an organization's information assets. Security incidents can include unauthorized access, data breaches, and malware infections.