You're reading from Aligning Security Operations with the MITRE ATT&CK Framework Level up your security operations center for better security

Product type Paperback

Published in May 2023

Publisher Packt

ISBN-13 9781804614266

Length 192 pages

Edition 1st Edition

Concepts

Cybersecurity

Author (1):

Rebecca Blair

View More author details

Table of Contents (18) Chapters

Preface

1. Part 1 – The Basics: SOC and ATT&CK, Two Worlds in a Delicate Balance

2. Chapter 1: SOC Basics – Structure, Personnel, Coverage, and Tools FREE CHAPTER

3. Chapter 2: Analyzing Your Environment for Potential Pitfalls

4. Chapter 3: Reviewing Different Threat Models

5. Chapter 4: What Is the ATT&CK Framework?

6. Part 2 – Detection Improvements and Alignment with ATT&CK

7. Chapter 5: A Deep Dive into the ATT&CK Framework

8. Chapter 6: Strategies to Map to ATT&CK

9. Chapter 7: Common Mistakes with Implementation

10. Chapter 8: Return on Investment Detections

11. Part 3 – Continuous Improvement and Innovation

12. Chapter 9: What Happens After an Alert is Triggered?

13. Chapter 10: Validating Any Mappings and Detections

14. Chapter 11: Implementing ATT&CK in All Parts of Your SOC

15. Chapter 12: What’s Next? Areas for Innovation in Your SOC

16. Index

Why subscribe?

17. Other Books You May Enjoy

Examining a risk register at the corporate level

As discussed in Chapter 2, one way to characterize and prioritize risks is in a risk registry. The issue is that not all risk registries are created the same. That means that some are at a high level, some can be too granular, and some have too many fields, which can be confusing when calculating risk. In my experience, the best corporate risk registers have to find the balance between being technical and accessible to all stakeholders. We typically use the following for the columns in the risk register:

The business organization or applicable line of business
A description of the risk
The score for the impact if exploited
The score for the likelihood of the risk being implemented
The risk score (impact x likelihood)
The identified risk owner (can be a team or a person)
Current compensating controls
The date that the risk was first added

This allows you to gather all applicable information for...

The rest of the chapter is locked

You're reading from Aligning Security Operations with the MITRE ATT&CK Framework Level up your security operations center for better security

Table of Contents (18) Chapters

Examining a risk register at the corporate level

Authors (1)

Personalised recommendations for you

You're reading from Aligning Security Operations with the MITRE ATT&CK Framework Level up your security operations center for better security

Table of Contents (18) Chapters

Examining a risk register at the corporate level

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you