The Policy Compliance application leverages MITRE’s ATT&CK® framework for cybersecurity. MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.
The MITRE compliance score helps you to evaluate your organization's adherence to the MITRE ATT&CK® framework. You can view the compliance score for the MITRE tactics, techniques, sub-techniques, and the number of assets, controls, and control instances. The MITRE ATT&CK EXPOSURE graph at the top displays a graphical presentation of the Mitre compliance data (posture count for passed and failed associated with Mitre).
To view the compliance by control:
Go to Posture> Controls.
Click Group By>MITRE ATT&CK and then select any one of the following Group By options to filter out the posture records to understand MITRE compliance.
Tactic: Displays compliance posture data based on MITRE tactics.
Technique: Displays compliance posture data based on MITRE technique.
Sub-Technique: Displays compliance posture data based on MITRE sub-technique.
The MITRE ATT&CK® compliance posture details provide detailed information about the MITRE tactics, techniques, and sub-techniques associated with the control. By understanding these compliance posture details, you can validate your organization’s adherence to MITRE compliance. The posture details comprise:
TACTICS: It displays tactic names, techniques and sub-techniques associated with the control of the posture.
A control can be associated with one or multiple techniques. Each technique, in turn, is associated with one or more sub-techniques.
MITIGATIONS: It displays the list of mitigation associated with control.
To view MITRE ATT&CK® posture details:
Go to the Posture tab.
On the Posture tab, select a control you are interested in and select View Posture Details from the Quick Action menu.
Click the Mitre Attack tab, the information appears as shown in the following image: