An intentional or unintentional act that can damage or otherwise compromise information and the systems that support it; can be active or passive, intentional or unintentional, and direct or indirect.