EDR tools continuously monitor endpoint behaviour and automatically contain threats when detected
An EDR agent watching endpoint behavior in real time and containing threats automatically applies A.8.16's monitor-and-act objective to endpoints, one slice of the networks, systems and applications A.8.16 covers.
The technical facet runs an EDR agent that watches behavior in real time and isolates threats automatically, the enforcement mechanism A.8.7 relies on.