Technical

Active cyber defence

Authorised proactive defensive detection and containment measures.

Definition

Defensive measures, authorised by competent authorities, that go beyond passive protections to include proactive detection, threat hunting, containment and disruption of malicious activity in order to reduce risk and impact to national systems, conducted within legal and policy boundaries.