An IT Security Incident is any activity that harms or represents a serious threat to the whole or part of an organization computer, telephone, and network-based resources such that there is an absence of service, inhibition of functioning systems, including unauthorized changes to hardware, software, or data, unauthorized exposure, change or deletion of PHI, crime or natural disaster that destroys access to or control of these resources.