Incident Security incident
A confirmed security event that has or could have a negative impact — not just "something weird".
Different from "event" (something happened) and "alert" (something maybe happened). Classifications: critical, high, medium, low. Triggers the incident response process. Reporting requirements: GDPR 72 hours, NIS2 24 hours.