The organization shall investigate information/cybersecurity-related notifications generated from detection systems.
The organization shall implement automated mechanisms to assist in the investigation and analysis of information/cybersecurity-related notifications.