Endpoint detection and response is a cybersecurity control or practice. It supports this objective: monitors endpoint behavior and supports rapid investigation and containment. In practice, document the business and security objective, the system boundary, the owner and the evidence that will show the control is operating as intended.NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework