It’s actionable to an extent. I once worked on an infrastructure project that increased all security controls based on threat levels, automatically.

A simple example would be cancelling badge access for a janitor to a sensitive area like an engine room, but allowing it if the threat level Was lower.