Events with negative consequences that could threaten the organization’s information assets or operations; sometimes referred to as incident candidates.