• Incident → Any disruption or security event
  • Significant incident → An incident with substantial impact, such as:
    • Service disruption
    • Large number of users affected
    • Financial or societal impact

  Only significant incidents trigger mandatory reporting.