Enterprise Security Management::Define Security Management policies & procedures to facilitate detection incidents

Policy-based recognition of a possible incident.  Within the Detection process the organization gains an awareness that Analysis has detected an anomaly � relative to expected results -- and that a possible incident may be occurring or may have occurred At this stage, automated policy-based remediation may still be possible i.e., without invoking Incident Management.<br/>