In a healthy organization, many error-based events will be detected. However, not all events should receive the same amount of attention.

Selection refers to the process of determining what level of investigation an event receives routine or expanded.

The selection process ensures that an organization will target the events with the greatest potential risk, thus making the best use of time and resources.