Entity’s infrastructure is configured to review and analyse audit events for anomalous or suspicious activity and threats
