An observable occurrence indicating a possible breach in the systems, network and operating environment.