Exciting news for CISO’s, CIO’s and InfoSec professionals.
Released July 2016, The MITRE ATT&CK® framework is referenced as the goto methodology to work out how “bad actors” target your organisations IT assets and gain access via an intimate technical understanding of your attack surface.
Smart CyberSec professionals were left to reverse engineer defensive tactics and strategies to mitigate different attack vectors. The not so smart were left floundering.
In recognition of this, the NSA has funded development of the formalised D3FEND Matrix to help organisations assess, analyse and mitigate attack surface risk.
It’s free, so get onto it.
MITRE D3FEND™ https://d3fend.mitre.org/
MITRE ATT&CK® https://attack.mitre.org/
National Security Agency Press Release (22nd June 2021)
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/2665993/nsa-funds-development-release-of-d3fend/
#cybersecurity #infosec #informationsecurity #datasecurity #privacy #dataprotection #ciso