- COA:
- Course Of Action
A Course of Action (COA) is a strategy or plan that outlines specific steps to be taken in response to a particular situation or incident. In the context of cybersecurity, COAs are developed to address security incidents, mitigate risks, and enhance overall security posture. By establishing clear COAs, organizations can improve their incident response capabilities and ensure that they are prepared to handle potential threats effectively.
[…] construct, which conveys specific measures to be taken to address threats whether they are corrective or preventative to address Exploit Targets, or responsive to counter or mitigate the potential impacts of Incidents.
https://docs.oasis-open.org/cti/stix/v1.2.1/stix-v1.2.1-part9-coa.pdf