This read-only DisplayString carries descriptive detail about a security event, and is populated only inside the trap notification itself since a direct GET on it returns an empty string. An admin relies on the trap payload, not polling, to see this contextual information about what triggered a given security alert. For example, a security trap for a lockout event would carry the locked-out username and reason in this field within the trap message.