A cybersecurity incident is any event that compromises the confidentiality, integrity, or availability of an information system or data. This includes: ransomware or malware infection, unauthorised access to systems or data, data breach or data leakage, phishing attack that resulted in credential compromise, denial of service attack, and insider threats. When in doubt — report it. The cost of over-reporting is zero. The cost of under-reporting can be catastrophic.