Select ALL classifications that the material says NIST Special Publication 800-61 uses for cybersecurity situations.

### Why this is right - **Events**: This is one of the three terms the material says the guide uses to classify situations. - **Adverse events**: This category includes harmful or disruptive situations such as system outages. - **Incidents**: Serious matters, such as unauthorized insider data removal, trigger a full incident response. ### The concept These labels support triage, which means deciding how a situation should be handled and whether it needs escalation. They help distinguish a matter an analyst can assess from a disruption or a serious incident requiring a broader response. Residual risk belongs to risk assessment terminology rather than this three-term classification. ### The other options - **Residual risks**: This is risk remaining after controls, not one of the three situation classifications listed in the material. ### Terms - **NIST**: National Institute of Standards and Technology. - **Triage**: Initial assessment used to decide handling and escalation. ### Remember The three classifications are event, adverse event, and incident.