Security Incident

Type: Information Object

Status: Planned
Industry Sector: Enterprise Core
Sensitivity Level: Confidential
Personal Information: No PII

Description:
A confirmed event that compromises the confidentiality, integrity or availability of an IT system or data asset.

Accessed by Application(s):

• Cybersecurity & SIEM Application
• Observability Platform
• Security Information & Event Management Application
• Security Operations Platform

 Yes

Attributes

Order	Name	Description	Type	Cardinality	Example value
1	Incident ID	Unique identifier for the security incident	GUID	Mandatory	SEC-2024-00089
2	Title	Short description of the incident	String	Mandatory	Ransomware detected on server cluster
3	Incident Type	Category of security incident	Enumeration	Mandatory	Ransomware
4	Severity	Impact severity of the incident	Enumeration	Mandatory	Critical
5	Status	Current resolution status of the incident	Enumeration	Mandatory	Under Investigation
6	Affected System	System or asset affected by the incident	String	Mandatory	Production Database Cluster
7	Detected At	Date and time the incident was detected	Date & Time	Mandatory	2024-05-12T03:14:00
8	Contained At	Date and time the incident was contained	Date & Time	Optional	2024-05-12T06:30:00
9	Root Cause	Identified root cause of the incident	String	Optional	Unpatched vulnerability in web server

 Yes
 
 Planned
 No PII
 Confidential
 Enterprise Core
 A confirmed event that compromises the confidentiality, integrity or availability of an IT system or data asset.

✏️ Edit