Which of the following would be considered a security incident example?

• A. Unauthorized access by using someone else's badge
• B. Forgery of a badge
• C. Reporting suspicious activity
• D. Positive identification with badge

Answer: (B)

Credential tampering is a security incident because it directly defeats access controls. Forging a badge shows an intentional attempt to create a counterfeit credential, which compromises security and requires formal reporting, investigation, and corrective action. This is the clearest example of credential manipulation in a SIDA context.

Using someone else's badge is serious and would also be treated as an incident, but forging a badge specifically demonstrates the act of credential fraud. Reporting suspicious activity is a protective action, not an incident by itself, and positive identification with a badge is normal use.