Incident

From CIPedia
Jump to: navigation, search

Definitions

European Definitions

European Commission

Incident means any event having an actual adverse effect on the security of network and information systems. [1]

ENISA

Incident is an event that has been assessed as having an actual or potentially adverse effect on the security or performance of a system. [2]

Other International Definitions

National Definitions

Australia

Incident is an emergency event or series of events which requires a response from one or more of the statutory response agencies. [3]


Austria

„Sicherheitsvorfall“ alle Ereignisse, die tatsächlich nachteilige Auswirkungen auf die Sicherheit von Netz- und Informationssystemen haben. [4]


Belgium

„Incident”: elke gebeurtenis met een daadwerkelijk schadelijk effect op de beveiliging van netwerk- en informatiesystemen. [5]

«Incident»: tout événement ayant un impact négatif réel sur la sécurité des réseaux et des systèmes d'information. [6]


Bulgaria

„инцидент“ означава събитие, което има реално неблагоприятно въздействие върху сигурността на мрежите и информационните системи. [7]

Incident shall denote an unforeseeable or unlikely event, limited in terms of duration or spatial effect, with a high intensity of forces or caused by human activity, threatening the life or health of humans, property or the environment. [8]

Инцидент: е непредвидимо или трудно прогнозируемо, ограничено по време и пространство действие, с висока интензивност на сили или вследствие на човешка дейност, застрашаващо живота или здравето на хора, имуществото или околната среда. [9]


Burkina-Faso

Incident: un evènement inattendu. [10]


Canada

An event caused by either human action or a natural phenomenon that requires a response to prevent or minimize loss of life or damage to property or the environment and reduce economic and social losses.

Événement d’origine humaine ou causé par un phénomène naturel qui nécessite une intervention afin de prévenir ou de réduire au minimum les décès et les dommages aux biens et à l’environnement et de réduire les pertes économiques et sociales. [11]


Croatia

„Incident” znači bilo koji događaj koji ima stvaran negativni učinak na sigurnost mrežnih i informacijskih sustava. [12]


Cyprus

«συμβάν»: κάθε γεγονός που έχει στη πραγματικότητα μια δυσμενή επίπτωση στην ασφάλεια συστημάτων δικτύου και πληροφοριών [13]


Czech Republic

„Incidentem“ jakákoliv událost, která má reálný negativní dopad na bezpečnost sítí a informačních systémů. [14]

V prostředí ICT je incidentem myšlena událost, která je obvykle spojená s výpadkem sítě, služby nebo se zhoršením jejich kvality. [15]

Incident in the ICT environment assumed to be an event which is usually related to the outage of a network, service, or to a deterioration of its quality. [16]


Denmark

»Hændelse«: enhver begivenhed, der har en egentlig negativ indvirkning på sikkerheden i net- og informationssystemer. [17]

Hændelser er ulykker (såsom brand, sammenstyrtning og udslip), der kan ske i relation til risikoobjekter og som kan føre til skader på personer, ejendom eller miljø. [18]


Estonia

„Intsident“– sündmus, mis tegelikult kahjustab võrgu- ja infosüsteemide turvalisust. [19]<


Finland

’Poikkeamalla’ mitä tahansa tapahtumaa, joka tosiasiassa vaikuttaa haitallisesti verkko- ja tietojärjestelmien turvallisuuteen. [20]

Häiriötilanne: uhka tai tapahtuma, joka vaarantaa yhteiskunnan elintärkeitä toimintoja ja jonka hallinta edellyttää viranomaisten ja muiden toimijoiden tavanomaista laajempaa tai tiiviimpää yhteistoimintaa ja viestintää.

Incident is a threat or an event which endangers vital operations of society and whose management requires wider or closer cooperation and communication than usual between the authorities and other actors. -unofficial translation- [21]


France

«Incident»: tout événement ayant un impact négatif réel sur la sécurité des réseaux et des systèmes d'information. [22]


Germany

„Sicherheitsvorfall“ alle Ereignisse, die tatsächlich nachteilige Auswirkungen auf die Sicherheit von Netz- und Informationssystemen haben. [23]

Eine nicht geplante Unterbrechung eines IT Service oder eine Qualitätsminderung eines IT Service. [24]


Greece

«συμβάν»: κάθε γεγονός που έχει στη πραγματικότητα μια δυσμενή επίπτωση στην ασφάλεια συστημάτων δικτύου και πληροφοριών [25]


Hungary

„Biztonsági esemény”: minden olyan esemény, amely ténylegesen kedvezőtlen hatást gyakorol a hálózati és információs rendszerek biztonságára. [26]


Ireland

‘Incident’ means any event having an actual adverse effect on the security of network and information systems. [27]


Italy

«Incidente», ogni evento con un reale effetto pregiudizievole per la sicurezza della rete e dei sistemi informativi. [28]


Latvia

“Incidents” ir jebkāds notikums, kas faktiski nelabvēlīgi ietekmē tīklu un informācijas sistēmu drošību. [29]


Lithuania

Incidentas– įvykis, turintis faktinį neigiamą poveikį tinklų ir informacinių sistemų saugumui. [30]

Incident shall mean an event, act or omission which gives rise or may give rise to an unauthorized access to an information system or electronic communications network, disruption or change of the operation (including takeover of control) of an information system or electronic communications network, destruction, damage, deletion or the change of electronic information, removal or limiting of the possibility to use electronic information and, also, which gives rise or may give rise to the appropriation, publication, dissemination or any other use of non-public electronic information by persons unauthorized to do so. [31]

(Cyber incident) Kibernetinis incidentas – įvykis ar veika, kuri sukelia ar gali sukelti neteisėtą prisijungimą ar sudaryti sąlygas neteisėtai prisijungti prie informacinės sistemos, elektroninių ryšių tinklo ar pramoninių procesų valdymo sistemos, sutrikdyti ar pakeisti, įskaitant valdymo perėmimą, informacinės sistemos, elektroninių ryšių tinklo ar pramoninių procesų valdymo sistemos veikimą, sunaikinti, sugadinti, ištrinti ar pakeisti elektroninę informaciją, panaikinti ar apriboti galimybę naudotis elektronine informacija, taip pat sudaryti sąlygas pasisavinti ar kitaip panaudoti neviešą elektroninę informaciją tokios teisės neturintiems asmenims. [32]


Luxembourg

«Incident»: tout événement ayant un impact négatif réel sur la sécurité des réseaux et des systèmes d'information. [33]

Incident: Situation qui peut être, ou conduire à, une perturbation, une perte, une urgence ou une crise. [34]


Malta

“Inċident” tfisser kwalunkwe avveniment li proprju għandu effett negattiv fuq is-sigurtà tan-netwerks u tas-sistemi tal-informazzjoni. [35]


Mexico

Incidente: Toda aquella situación anómala, que suele coincidir con situaciones que quedan controladas. [36]


Netherlands

Een incident is een gebeurtenis waarbij informatie, informatiesystemen of -diensten verstoord worden, uitvallen of misbruikt worden. [37]

Incident: Onder incident wordt verstaan elke gebeurtenis, die niet tot de standaardoperatie van een IT-service behoort en die een interruptie in of een vermindering van de kwaliteit van die service kan veroorzaken. [38]

„Incident”: elke gebeurtenis met een daadwerkelijk schadelijk effect op de beveiliging van netwerk- en informatiesystemen. [39]

Incident is een ongewenste gebeurtenis die tot schade - financieel of anderszins - heeft geleid.

An incident is an unwanted event which has caused financial or other damage. [40]

Een (cyber) incident is een ICT-verstoring in de dienstverlening waardoor de te verwachten beschikbaarheid van de dienstverlening geheel of gedeeltelijk is verdwenen en/of het ongeoorloofd openbaren, verkrijgen en/of wijzigen van informatie. [41]

[HEALTH sector] Incident: Een onbedoelde gebeurtenis tijdens het zorgproces die tot schade aan de patiënt heeft geleid of zou kunnen leiden. [42]


New Zealand

Incident is (1) an occurrence that needs a response from one or more agencies (it may or may not be an emergency); (2) the first official level of agency response. [43]


Oman

An incident as an adverse network event in an information system or network or the threat of the occurrence of such an event. [44]


Philippines

Incident:
(a) An assessed occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system; or the information the system processes, stores, or transmits; or
(b) that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable usepolicies. [45]


Poland

Incydent – każde zdarzenie, które ma lub może mieć niekorzystny wpływ na cyberbezpieczeństwo. [46]

incydent krytyczny [Critical incident] – incydent skutkujący znaczną szkodą dla bezpieczeństwa lub porządku publicznego, interesów międzynarodowych, interesów gospodarczych, działania instytucji publicznych, praw i wolności obywatelskich lub życia i zdrowia ludzi, klasyfikowany przez właściwy CSIRT MON, CSIRT NASK lub CSIRT GOV. [46]

Incydent poważny [Serious incident] – incydent, który powoduje lub może spowodować poważne obniżenie jakości lub przerwanie ciągłości świadczenia usługi kluczowej. [46]

Incydent istotny [Significant incident] – incydent, który ma istotny wpływ na świadczenie usługi cyfrowej w rozumieniu art. 4 rozporządzenia wykonawczego Komisji (UE) 2018/151 z dnia 30 stycznia 2018 r. ustawiającego zasady stosowania dyrektywy Parlamentu Europejskiego i Rady (UE) 2016/1148 w odniesieniu do dalszego doprecyzowania elementów, jakie mają być uwzględnione przez dostawców usług cyfrowych w zakresie zarządzania istniejącymi ryzykami dla bezpieczeństwa sieci i systemów informatycznych, oraz parametrów służących do określenia, czy incydent ma istotny wpływ (Dz. Urz. UE L 26 z 31.01.2018, str. 48), zwanego dalej „rozporządzeniem wykonawczym 2018/151”. [46]

„Incydent” oznacza każde zdarzenie, które ma rzeczywiście niekorzystny wpływ na bezpieczeństwo sieci i systemów informatycznych. [47]


Portugal

«Incidente», um evento com um efeito adverso real na segurança das redes e dos sistemas de informação. [48]

[Definição] Incidente: (1) Um evento com um efeito adverso real na segurança das redes e dos sistemas de informação; (2) Ações tomadas através da utilização de uma rede de computadores que que resultam num efeito atual ou potencialmente adverso sobre um sistema de informação e/ou a informação aí armazenada. [49]


Romania

„Incident” înseamnă orice eveniment care are un efect real negativ asupra securității rețelelor și a sistemelor informatice. [50]


Serbia

инцидент је унутрашња или спољна околност или догађај којим се угрожава или нарушава информациона безбедност. [51]


Singapore

An event that occurs by chance or due to a combination of unforeseen circumstances, which, if not handled in an appropriate manner, can escalate into an emergency or disaster. [52]

An incident precedes an emergency or disaster.

Slovakia

„Incident“ je každá udalosť, ktorá má skutočne nepriaznivý vplyv na bezpečnosť sietí a informačných systémov. [53]


Slovenia

„Incident“ pomeni vsak dogodek, ki ima dejanski negativen učinek na varnost omrežij in informacijskih sistemov. [54]

Mimoriadna udalosť: Závažná, časovo ťažko predvídateľná a priestorovo ohraničená príhoda spôsobená vplyvom živelnej pohromy, technickej alebo technologickej havárie, prevádzkovej poruchy, prípadne úmyselného konania človeka, ktorá vyvolala narušenie stability systému alebo prebiehajúcich dejov a činností, ohrozuje životy a zdravie osôb, hmotné a kultúrne statky či životné prostredie. [55]


Spain

«Incidente»: todo hecho que tenga efectos adversos reales en la seguridad de las redes y sistemas de información. [56]


Sweden

Incident : en händelse med en faktisk negativ inverkan på säkerheten i nätverks- och informationssystem. [57]



Switzerland

Ein Ereignis ist ein Geschehen, dessen Auswirkungen beobachtbar sind. [58]

Un événement est un fait ayant des conséquences observables. [59]

L’evento è un avvenimento con conseguenze accertabili. [60]

Tanzania

Incident: An occurrence or event, either human-caused or by natural phenomena, that requires action by emergency response personnel to prevent or minimise loss of life or damage to property and/or natural resources. [61]


United States

DHS
Incident is an occurrence, caused by either human action or natural phenomenon, that may cause harm and require action, which can include major disasters, emergencies, terrorist attacks, terrorist threats, wild and urban fires, floods, hazardous materials spills, nuclear accidents, aircraft accidents, earthquakes, hurricanes, tornadoes, tropical storms, war-related disasters, public health and medical emergencies, cyber attacks, cyber failure/accident, and other occurrences requiring an emergency response. [62]

White House
Cyber incident: An event occurring on or conducted through a computer network that actually or imminently jeopardizes the integrity, confidentiality, or availability of computers, information or communications systems or networks, physical or virtual infrastructure controlled by computers or information systems, or information resident thereon. [63]
For purposes of this directive, a cyber incident may include a vulnerability in an information system, system security procedures, internal controls, or implementation that could be exploited by a threat source.
FISMA
Incident is an occurrence that (A) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (B) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies. [64]
FISMA also uses the terms “security incident” and “information security incident” in place of incident.
NIST
A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices. [65]

This document points to several ICT-related definitions of incident.

NFPA-1600
An event that has the potential to cause interruption, disruption, loss, emergency, crisis, disaster, or catastrophe. [66]

DoD
Incident is an occurrence, caused by either human action or natural phenomena, that requires action to prevent or minimize loss of life, or damage, loss of, or other risks to property, information, and/or natural resources. [67]

US-CERT
Incident is an event (or series of events) that significantly affects (or has the potential to significantly affect) organizational assets and services and requires the organization (and possibly other stakeholders) to respond in some way to prevent or limit adverse impacts. [68]

NIST
Incident:  An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies. (from: NIST SP 800-128) [69]

Incident:  A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices. (from: NIST SP 800-61 Rev 2) [69]

Incident: An occurrence that results in actual or potential jeopardy to the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies. (from: CNSSI 4009-2015 [69]

Standard Definition

ISO/PAS 22399:2007

Event that might be, or could lead to, an operational interruption, disruption, loss, emergency or crisis. [70]

ISO 22300:2012(en)

Situation that might be, or could lead to, a disruption, loss, emergency or crisis.[71] [72]

Other Definitions

Ontario (Canada)

Incident is an occurrence or event that requires an emergency response to protect people, property, the environment, the economy and/or services. [73]

Incident: Événement qui exige une intervention d'urgence afin de protéger les personnes, les biens, l’environnement, l’économie ou les services. [73]

See also

Notes

  1. DIRECTIVE (EU) 2016/1148 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union
  2. ENISA Risk Glossary
  3. Multi-agency incident management, Emergency Management Australia (1998)
  4. Directive (EU) 2016/1148 -DE
  5. Directive (EU) 2016/1148 - - NL
  6. Directive (EU) 2016/1148 - - FR
  7. Directive (EU) 2016/1148 – BG
  8. Disaster Protection Act; Promulgated, State Gazette, No.102/19.12.2006 (2006)
  9. ЗАКОН за защита при бедствия
  10. CIRT-BF Glossary
  11. Vocabulaire de la gestion des urgencies/Emergency Management Emergency Management Vocabulary 281 (2012)
  12. Directive (EU) 2016/1148 - HR
  13. Directive (EU) 2016/1148 - EL
  14. Directive (EU) 2016/1148 - CS
  15. Výkladový slovník kybernetické bezpečnosti (2013)
  16. Cyber Security Explanatory Glossary (2013)
  17. Directive (EU) 2016/1148 - DA
  18. [HÅNDBOG I RISIKOBASERET DIMENSIONERING, Beredskabsstyrelsen, Denmark (2004)]
  19. Directive (EU) 2016/1148 - ET
  20. Directive (EU) 2016/1148 - FI
  21. Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)
  22. Directive (EU) 2016/1148 - FR
  23. [ http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016L1148&from=EN Directive (EU) 2016/1148 -DE ]
  24. BSI Glossary
  25. Directive (EU) 2016/1148 – EL
  26. Directive (EU) 2016/1148 - HU
  27. Directive (EU) 2016/1148 - EN
  28. Directive (EU) 2016/1148 - IT
  29. Directive (EU) 2016/1148 - LV
  30. Directive (EU) 2016/1148 - LT
  31. GOVERNMENT OF THE REPUBLIC OF LITHUANIA RESOLUTION NO 796 of 29 June 2011 ON THE APPROVAL OF THE PROGRAMME FOR THE DEVELOPMENT OF ELECTRONIC INFORMATION SECURITY (CYBER-SECURITY) FOR 2011–2019
  32. LIETUVOS RESPUBLIKOS KIBERNETINIO SAUGUMO ĮSTATYMAS 2014 m. gruodžio 11 d. Nr. XII-1428 Vilnius
  33. Directive (EU) 2016/1148 - FR
  34. Glossaire
  35. Directive (EU) 2016/1148 - MT
  36. GUÍA PARA LA PRESENTACIÓN DEL ESTUDIO DE RIESGO MODALIDAD ANALISIS DE RIESGO, Mexico
  37. Cyber Security Beeld Nederland 2018
  38. ABDO 2017
  39. Directive (EU) 2016/1148 - NL
  40. Zakboekje Preventie Cybercrime (2008
  41. NCSC, Cyber Security Beeld Nederland 5 (2015)
  42. Patiëntveiligheid Definitielijst (2005)
  43. The New Zealand Coordinated Incident Management System, Department of the Prime Minister and Cabinet, New Zealand. (2014)
  44. Oman CERT Glossary
  45. DND GLOSSARY OF CYBER SECURITY TERMS (v.4)
  46. 46.0 46.1 46.2 46.3 U S TAWA z dnia o krajowym systemie cyberbezpieczeństwa / Polish (draft) law on the national cybersecurity system (2018)
  47. Directive (EU) 2016/1148 - PL
  48. Directive (EU) 2016/1148 - PT
  49. Glossário Centro National de Cibersegurança Portugal
  50. Directive (EU) 2016/1148 - RO
  51. ЗАКОН О ИНФОРМАЦИОНОЈ БЕЗБЕДНОСТИ (Law on Information Security), Serbia
  52. Singapore Standard SS 540: 2008 on Business Continuity
  53. Directive (EU) 2016/1148 - SK
  54. Directive (EU) 2016/1148 - SL
  55. BEZPEČNOSTNÁ RADA SLOVENSKEJ REPUBLIKY
  56. Directive (EU) 2016/1148 - ES
  57. Directive (EU) 2016/1148 - SV
  58. Glossar der Risikobegriffe, Bundesamt für Bevölkerungsschutz BABS, 29.4.2013
  59. Glossaire des risques, Office fédéral de la protection de la population, 29.4.2013
  60. Glossario sui rischi, Ufficio federale della protezione della popolazione UFPP, 29.4.2013
  61. United Republic of Tanzania National Operational Guidelines for Disaster Management 2003
  62. DHS Risk Lexicon 2010 Edition, September 2010
  63. Presidential Policy Directive PPD-41, 2016
  64. The Federal Information Security Modernization Act of 2014 (FISMA)44 U.S.C. § 3552(b)(2).
  65. NISTIR 7298 rev 2: Glossary of Key Information Security Terms, May 2013/ NIST SP 800-61
  66. NFPA-1600
  67. Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)
  68. Cyber Resilience Review (CRR): Method Description and Self-Assessment User Guide (2016)
  69. 69.0 69.1 69.2 NIST Glossary
  70. ISO/PAS 22399:2007 Societal security - Guideline for incident preparedness and operational continuity management.
  71. ISO 22300:2012(en) Societal security — Terminology
  72. ISO 22301:2012 Societal security -- Business continuity management systems --- Requirements
  73. 73.0 73.1 Province of Ontario’s Emergency Management Glossary of Terms