Pre-defined actions that are linked to specific types of threats) that are put into place (documented and communicated) to guide less experienced analysts and also allow more experienced analysts to document their actions against policy and playbook processes.