Re: MITRE: any generalized framework or assessment is only as good as the honesty an organization brings to it. I believe ATT&CK was built for good, but like any assessment tool, it's been hacked (pun intended) so it benefits vendors for sales purposes rather than helping orgs focus on fixes.
Re: MITRE: any generalized framework or assessment is only as good as the honesty an organization brings to it. I believe ATT&CK was built for good, but like any assessment tool, it's been hacked (pun intended) so it benefits vendors for sales purposes rather than helping orgs focus on fixes.