Steps to implement an action policy.

  1. Apply a threshold to a monitor.
  2. Associate a notification (or schedule of notifications) to occur for incidents where the threshold is triggered.
  3. Associate further (possibly corrective or mitigating) actions with the event in order to implement a traceable and deterministic site policy.