Workspaces / Demonstration library / P11
Security Monitoring, Endpoint Telemetry
File corpus.json
Type internal policy
Classification internal
Department security
Permitted roles analyst, manager, executive, admin
Version 1.0 (effective 2026-01-01)
Owner Synthetic demonstration policy
Status active
SHA-256 2ddbfd8b5484382d068d13a7f006e7e3d5f461e351bcc032b89eabccac88f181
Uploaded 2026-10-31T06:37:16+00:00
Chunks (1)
Each chunk is a citable unit. Answers cite the chunk id.
[P11]
Endpoint security telemetry must be monitored for suspicious execution, credential abuse, persistence and lateral movement indicators. High-severity alerts must be triaged promptly and linked to an incident record where appropriate.
Answers come only from the governed library and are decision support, not legal advice. Verify regulatory content against the regulator's current publication.