Conclusion

This new model is intended to complement existing cybersecurity frameworks and maturity models by focusing on the degree to which threat information is optimally leveraged in an organization’s defenses. It outlines key components of cybersecurity likely to benefit most from leveraging threat information, along with defined levels of incorporation of that knowledge for each. This model should be considered a hypothesis of what constitutes an effective threat-informed defense to be revised and improved as evidence is gathered through its use.

Acknowledgements

The project team would like to thank our CTID participants for their support, engagement, and feedback. We would also like to thank all the experts internal and external to MITRE who contributed to MITRE INFORM.

The MITRE INFORM project team includes:

• Forrest Carver

• Mike Cunningham

• Antonia Feffer

• Kayla Kraines

• Julia Litrel

• Steve Luke

• Lauren Lusty

• Ivy Oeltjenbruns

• Allison Robbins

• Val Valenzuela

• Apurva Virkud