In this post we will cover a lot of the connections between the MITRE ATT&CK framework to how we created a maturity model from it and help visualize our environment. Our topics for this discussion:
- Scoring based on multiple decision points
- Mapping Specific Security Controls to Tactics
- Visualizing results for decision makers