MON-01.11 - Automated Response to Suspicious Events

Mechanisms exist to automatically implement pre-determined corrective actions in response to detected events that have security incident implications.