AttackIQ and The Chertoff Group help enterprise customers build and sustain security programs>
Help Net Security
AttackIQ, the largest independent leader of the continuous security validation market, announced a partnership with The Chertoff Group, a leading global security risk management firm, to offer a joint solution to help organizations measure security risk, train security staff and justify security investments. The service, called the ATT&CK Diagnostic, is designed to help enterprise customers build and sustain security programs that are strategic, risk-based and focused on proven effectiveness. Leveraging AttackIQâs automated testing platform which operationalizes the MITRE ATT&CK framework1, the industryâs most authoritative approach to mapping threat actors to tactics, techniques and procedures (TTPs), the ATT&CK Diagnostic measures the effectiveness of an organizationâs defensive countermeasures with unparalleled transparency and precision. The ATT&CK Diagnostic creates a risk-based threat model, maps a customerâs current defenses to TTPs in the threat model, clearly identifying what technologies and standards are addressing what TTPs, and identifying holes in coverage.
Link: https://www.helpnetsecurity.com/2019/10/23/attackiq-the-chertoff-group/