Incident response · The incident definition · Element
The definition
What qualifies as an incident.
The part
What it is
Written as observable conditions rather than as a judgement about seriousness, since seriousness is what the severity levels are for.
Near misses should qualify, because they are the cheapest source of information about what would have happened.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.