A significant incident is one that:
- Causes substantial operational disruption, or
- Impacts a large number of users, or
- Has financial or societal consequences
Specific thresholds (e.g., number of users affected or duration of disruption) are defined in implementing regulations.