Incident tags are used by the ThreatMatch platform to categorise a relevant incident event. Tags should be used for all CIISI and TIBER projects.