Politiques et garde-fous

POLICY {
    DEFAULT DENY

    ALLOW inspect_endpoint
    ALLOW isolate_endpoint IF P(credential_attack) >= 0.95

    NEVER isolate_endpoint
        WHEN asset.criticality == CRITICAL

    REQUIRE APPROVAL FOR isolate_endpoint
        WHEN action.risk >= HIGH
}