Automated Response

Noun · Security & Infosec

Definitions

  1. A security action triggered without waiting for a human, such as isolating a host, blocking an IP, disabling a user, or collecting evidence. Automated response improves speed but must be controlled carefully to avoid causing business disruption through false positives.

    In plain English: A security action carried out automatically without waiting for a person.

    Example: "The EDR system executed an automated response that quarantined the endpoint within seconds of the ransomware behavior trigger."

Related Terms