3.03

Determine the appropriate mitigation for a given attack or vulnerability

• • Take appropriate action on reported security violations by end users and application developers
• • Modify ASM policy to adapt to attacks