logo
        • Who We Are

        • Learn more about MITRE Engenuity’s journey as a hub for transformative innovation.

        • How We Engage

        • We forge innovative partnerships to generate whole-of-nation solutions to complex technological problems.

        • Contact Us

        • Connect with a member of the MITRE Engenuity team and ensure your inquiry gets to the right people.

        • Cybersecurity

        • We are relentlessly advancing the art of threat-informed defense, anchored by a belief that we can improve our defenses with a systemic application of a deep understanding of adversary tradecraft and technology.

        • ATT&CK Evaluations

        • We offer objective analysis of cyber products and features – see our latest results.

        • Center for Threat-Informed Defense

        • Read more about the cutting-edge research and development being done with input from our participant organizations, featuring some of the top security operations centers.

        • Developing tomorrow's cyber workforce today.
        • News & Insights

        • We are leading the leading edge of innovation. Explore the latest news, insights, R&D, and special projects from our advanced tech experts and partners.

        • Subscribe to Our Newsletters

        • Our tech foundation is addressing the complex problems that face our nation today. Find out how you can join our efforts as we spur innovation for public good.

          Subscribe

NIST 800-53 CONTROLS TO ATT&CK MAPPINGS

Project Summary

Published : Jan 13, 2022

This project created a comprehensive set of mappings between MITRE ATT&CK® and NIST Special Publication 800-53 with supporting documentation and resources. These mappings provide a critically important resource for organizations to assess their security control coverage against real-world threats as described in the ATT&CK knowledge base and provide a foundation for integrating ATT&CK-based threat information into the risk management process. With over 6,300 individual mappings between NIST 800-53 and ATT&CK, this resource greatly reduces the burden on the community to do their own baseline mappings– allowing organizations to focus their limited time and resources on understanding how controls map to threats in their specific environment. 

Problem

Large and complex security control frameworks such as NIST 800-53 do not relate to actionable TTPs in ATT&CK.

SOLUTION

Create a comprehensive and open, curated set of mappings between 800-53 controls and ATT&CK techniques.

IMPACT

Defenders can quickly focus on understanding how the controls in use in their environment relate to adversary TTPs of interest to them.

Project Resources:

ATT&CK Version 12
ATT&CK Version 10
ATT&CK Version 9
ATT&CK Version 8

flow

funding Research Participants

Attack iq logo on a black background.
Jp morgan chase & co logo.

Non-Profit Research Participants

The center for internet security logo.

Share This Project

Explore More of Our Work

Stay Informed

Stay informed about new releases of R&D projects and other exciting updates from the Center for Threat-Informed Defense.