incidentmeans any event having an actual adverse effect on the security of network and information systems as defined in Article 4(7) of Directive (EU) 2016/1148;
information securitymeans the preservation of confidentiality, integrity, authenticity and availability of network and information systems;
information security eventmeans an identified occurrence of a system, service or network state indicating a possible breach of the information security policy or failure of information security controls, or a previously unknown situation that can be relevant for information security;
information security riskmeans the risk to organisational civil aviation operations, assets, individuals, and other organisations due to the potential of an information security event.
threatmeans a potential violation of information security which exists when there is an entity, circumstance, action or event that could cause harm;
vulnerabilitymeans a flaw or weakness in an asset or a system, procedures, design, implementation, or information security measures that could be exploited and results in a breach or violation of the information security policy.