An issue is a deviation, deficiency, or event that introduces risk to systems, data, operations, or compliance—requiring documentation, remediation, and potential escalation.