information security event

occurrence indicating a possible information security breach or failure of controls

[SOURCE: ISO/IEC 27035-1:2016, 3.3, modified — “breach of information security” has been replaced with “information security breach”]