Do your cybersecurity technologies and security features in other systems automatically perform containment actions when threats are detected?

Automatic containment actions are security measures that isolate or restrict potentially malicious activities without requiring manual intervention. Examples include antivirus software automatically quarantining infected files, firewalls blocking suspicious network traffic, intrusion prevention systems terminating suspicious connections, and endpoint protection platforms isolating compromised devices from the network.

Evidence of fulfillment could include configuration screenshots of security tools showing enabled automatic containment features, security tool logs demonstrating containment actions taken during incidents, documentation of containment policies implemented in security technologies, or vendor specifications highlighting the automatic containment capabilities deployed in your environment.