Security monitoring collects and reviews defined signals that may indicate misuse, compromise, policy violation, or a control failure.
Who this service is for
Organizations use monitoring to improve visibility across websites, servers, administrative access, security tools, backups, and important configuration changes.
Detection needs a response path
The service defines sources, coverage, retention, alert rules, severity, hours, contacts, triage, escalation, and actions that require separate authorization.