What is the difference between major incident and security incident

[saha23456]

What is the difference between major incident and security incident

[Viraj Hudlikar]

Hello @saha23456 

The main difference between the two lies in the scope of their impact: a security incident has the potential to affect the security of a company’s resources or data, while a major incident typically affects only the operations of the business.

Examples of Security Incident can be 
Unusual behavior from privileged user accounts.

Unauthorized insiders trying to access servers and data.

Malware Infection from Suspicious File.

Examples of Major Incident can be 

Network Outage Impacting All Offices.

Critical Application Failure During Peak Hours

If my response has helped you hit helpful button and if your concern is solved do mark my response as correct.

Thanks & Regards
Viraj Hudlikar.

[Dr Atul G- LNG]

Hi @saha23456 

A major incident is one that has a significant impact on the business or affects multiple users. It can stem from operations or other areas. On the other hand, a security incident is specifically related to security, such as threats, vulnerabilities, or data breaches.

A security incident can also be classified as a major incident if it has a large-scale impact.

[Harish Bainsla]

Hi @saha23456 

A major incident  is an incident that results in significant disruption to the business and demands a response beyond the routine incident management process.

https://www.youtube.com/watch?v=47iyD-GDPU0

Security incident response is a strategic approach to identifying, prioritizing and containing a cyberattack, as well as managing the resolution and aftermath of such an attack

https://www.youtube.com/watch?v=Pu8JdJrHJ2E

if my answer helps you mark helpful and accept solution

[yad_achyut]

@saha23456 : 
A Major Incident refers to a high-priority incident that causes a significant disruption to business operations or IT services, typically impacting multiple users or critical systems.
where A Security Incident refers to an event or series of events that may compromise the confidentiality, integrity, or availability of information or systems. These incidents are specifically tied to cybersecurity threats or violations.