Conclusion

This new model is intended to complement existing cybersecurity frameworks and maturity models by focusing on the degree to which threat information is optimally leveraged in an organization’s defenses. It outlines key components of cybersecurity likely to benefit most from leveraging threat information, along with defined levels of incorporation of that knowledge for each. This model should be considered a hypothesis of what constitutes an effective threat-informed defense to be revised and improved as evidence is gathered through its use.

Acknowledgements

The project team would like to thank our Center participants for their support, engagement, and feedback. We would also like to thank all the experts internal and external to MITRE who contributed to M3TID.

The M3TID project team includes:

• Forrest Carver

• Steve Luke

• Ivy Oeltjenbruns