Using protocol cause codes, a mobile telecommunications network (10) may be pre-configured with a rule set (63) to report the results of the cause codes to an automated security event processing system (50) for security event detection and containment. The cause code information sent from the network nodes (30, 40) to the automated security event processing system will allow for security event correlation across network nodes for the determination and resolution of security breaches.