Threat Detection & Containment
- Layered controls detect and block malicious sign-ins and applications through conditional access, endpoint detection and response, and security monitoring.
- A defined process triages, contains, and remediates security alerts.
- Detection coverage is mapped to adversary tactics and techniques and reviewed regularly.
Framework Alignment: NIST CSF DE.CM, RS.MI; CIS Control 13; GDPR Art. 32; ISO 27001:2022 A.8.16, A.5.25
