
Approaches for applying MITRE ATT&CK framework in EBIOS RM Operational Scenarios
This study explores different approaches for using MITRE ATT&CK (a knowledge base of past security incidents) as a risk identification technique, within the frame of EBIOS RM (a security risk assessment methodology). It discusses the relevance of these approaches, and of the overall use of MITRE ATT&CK for risk assessment.