Summary

Evaluating a risk register at a corporate level, applying MITRE to other teams, mapping controls, and creating policies and standards are ways to increase the security standpoint of your organization and make them more efficient. As mentioned in the sections, most of these actions will require more manual work upfront but will save time overall. From this chapter, you should now be able to critically look at some of the non-traditional security teams and apply control mapping and MITRE controls to them, to help drive actions.

In the next chapter, we’ll cover areas for improving your SOC environment to help increase its capabilities and make it more scalable.