CySA+ - Reporting and Communication - Incident declaration criteria