The State of MITRE ATT&CK® Threat-Informed Defense Report

Download the report The State of MITRE ATT&CK® Threat-Informed Defense by completing the form on the right.

Cyber adversaries and threats are becoming increasingly sophisticated and more frequent. In order to gain deeper insights into organizational readiness and help close the cybersecurity community’s skills gap, MITRE Engenuity, MITRE’s tech foundation for public good, conducted a comprehensive survey to answer important questions. The survey of 297 IT security professionals found that:

• Although 82 percent of respondents said they know about the MITRE ATT&CK framework,
only 8 percent reported that they are using the ATT&CK framework regularly;
• 84 percent noted they do not have a thorough mapping to ATT&CK;
• 48 percent of respondents said they feel very confident that they could utilize ATT&CK, but only 8 percent use it regularly;
• 73 percent of respondents found it valuable to have credentials validating mastery in applying ATT&CK and 70 percent of hiring managers seek out employees who have the skill to apply it.

More Popular Resources