A security-related event that has been identified by a security policy as a potential breach of security.