Any potential circumstance, event or action that could damage, disrupt or otherwise adversely impact network and information systems, the users of such systems and other persons.
Source: Regulation (EU) 2019/881 (Cybersecurity Act), as quoted in NIS2
