An adverse event that violates the security of an organization and represents a potential risk of loss of the confidentiality, integrity, or availability of its assets and ongoing operations.