Here goes an attempt to answer a few questions related to @MITREattack:
1. Where does ATT&CK fit in the context of your program?
2. Where and how is ATT&CK useful for metrics / measurement?
3. What first step should you take with respect to ATT&CK?
4/14/2020, 6:56:42 PM