Use ATT&CK to Help Quantify Your Security Risk

Perfect for a summer internship, and can deliver an impressive and useful result.

ATT&CK Navigator example, generated by Andrew Selig

I’ve been somewhat obsessed with Mitre ATT&CK for the past 4 years. Companies focus on ISO 27001 and NIST 800–53 to develop policies and meet a myriad of compliance regulations, however meeting these guidelines has never instilled a strong degree of confidence as an incident response manager that a company would identify, mitigate, and recover from adversarial attacks. I set …

amp att companies compliance cybersecurity focus generated guidelines identify incident incident response internships iso iso 27001 manager meeting mitre mitre att&amp mitre att&ck navigator nist perfect policies regulations response result risk risk management security security risk summer threat intelligence