In CP, the point at which a management decision to act is made in reaction to data or a notification of an incident or disaster; an activity or event that causes the CSIRT to be activated to respond to an incident.