In incident management, an observed change to the normal behavior of a system, environment or process is called what?1 pointEventIncidentThreatAttack

In incident management, an observed change to the normal behavior of a system, environment, or process is called an Incident. An incident signifies that something unexpected has occurred that may warrant further investigation or action to restore normalcy.

Here's a brief explanation of the relevant terms:

1. Event - A significant occurrence or happening but does not imply an issue has arisen.
2. Incident - An event that disrupts normal service operation and might cause reduction in quality or interruption of service.
3. Threat - A potential cause of an unwanted incident that may result in harm.
4. Attack - An intentional exploit of a vulnerability, with the aim to compromise the system’s integrity, availability, or confidentiality.

Thus, among the options provided, the correct answer is Incident.