MITRE ATT&CK® Framework for a Risk-Based Approach to Cybersecurity

Cybercrime has changed significantly in the past year. We’ve seen the cyber risks grow in number and complexity— there’s a rise in Ransomware-as-a-Service, the ‘hiring’ of tactical experts for specialized roles in ransomware gangs, and the use of double extortion tactics.

These evolving tactics, techniques, and procedures (TTPs) used by cybercriminals to exploit businesses has left many business leaders wondering just how effective their cybersecurity programs are.

In this interview with ISMG, Tia Hopkins, eSentire’s Field CTO & Chief Cyber Risk Strategist, sheds light on why organizations should adopt a risk-based approach to cybersecurity and how to leverage the MITRE ATT&CK framework to reduce their cyber risks.

Key takeaways from the webinar include:

• Why you should leverage the MITRE ATT&CK framework to assess and quantify your cyber risk
• The most impactful MITRE-classed detections observed by eSentire’s Threat Response Unit (TRU)
• Benefits of taking a risk-based approach (vs. a maturity-based approach) to your cybersecurity program
• How to leverage the MITRE ATT&CK framework to get actionable recommendations to reduce your cyber risks