Conducting a Cybersecurity Gap Assessment with MITRE ATT&CK Navigator for Small Businesses

This article presents an approach for conducting a cybersecurity gap assessment for small businesses using open-source and free resources. This approach is particularly suited for businesses with limited security budgets that are not ready to invest in a full risk assessment project.

Prerequisites

To ensure the success of this process, an IT professional with cybersecurity knowledge (attacks, controls, technologies) and familiarity with MITRE ATT&CK should lead the assessment. This knowledge is necessary to understand the information provided by MITRE ATT&CK. …

cyber risk assessment cybersecurity gap-analysis mitre attack