The response to a reported or detected security compromise, such as a rejected Duo prompt, or suspicious account activity.