thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Security Event

Any observable occurrence in a system or network that may have security relevance.

Definition

Events include logins, file accesses, firewall connections and configuration changes. Most events are benign; analysis determines whether an event or group of events constitutes an incident. NIST defines an adverse event as one with negative consequences.

Example

A single failed login attempt is a security event.

Exam tip

Every incident is an event, but not every event is an incident.

Don't confuse it with

Related terms