Cybersecurity incidents

A cybersecurity incident or information security incident is defined under ISO/IEC TR 18044:2004 as a "single or a series of unwanted or unexpected information security events that have a significant probability of compromising business operations and threatening information security." When a cybersecurity incident occurs, it very often causes service disruption because one or more IT services might be affected. These IT services might have been destroyed beyond recovery or forced to shut down or the threat actor is monitoring the IT system, preventing employees from continuing their work. In most cases, the threat actors follow a cyberattack kill chain that includes the injection of malware in the network. A cybersecurity incident by definition is either in the past or ongoing. The threat landscape is constantly evolving, and cybersecurity is...