security incident subgroup of incident, 6 assertions