CISA releases updated guide for mapping to MITRE ATT&CK framework

The Cybersecurity and Infrastructure Security Agency has updated its best practices guidance for using the MITRE ATT&CK framework, which identifies “real-world” cyber adversary tactics and helps entities organize their defenses.

CISA posted “Best Practices for MITRE ATT&CK Mapping” on Tuesday.

“For [CISA], understanding adversary behavior is often the first step in protecting networks and data. The success network defenders have in detecting and mitigating cyberattacks depends on this understanding,” the cyber agency says in the document.

It says, “The...