Which organization is cited in relation to the incident definition?

• A. ISO
• B. CERT
• C. NIST
• D. DHS

Answer: (B)

In cybersecurity, who defines what counts as an incident is often tied to the authority that set the standard wording used in training and guidance. CERT/Coordination Center is widely cited for the official incident definition because it has long provided the standard language distinguishing an incident from a routine event and describes an incident as an adverse occurrence that compromises or threatens to compromise the security of information, systems, or operations. This broad, commonly taught definition is why CERT is the best pick here, since the question points to the source many courses and materials reference when describing what constitutes an incident. While other organizations like NIST and ISO publish important incident handling frameworks and standards, the phrasing in this item aligns with CERT’s established definition. DHS is more about national cybersecurity policy and defense roles and isn’t typically the source of the formal incident-definition wording.