Definition
Means any event having an actual adverse effect on the security of network and information systems
Source
Point (7) of Article 4 of Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016
Link
https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016L1148&rid=1
