>> Welcome to Module 2,
Lesson 3, quantitative scorecard.
In this lesson, we will explore how
ATT&CK can help us produce and track
various cybersecurity metrics and
appreciate the types of
questions that these metrics can help us address.
A very common but also very hard question to answer,
is how can we measure our cybersecurity posture?
Because as we know, cybersecurity
is not an easy value to quantify,
but our ability to track progress and growth
over time is vital for cybersecurity success.
This is where ATT&CK comes in.
We can use ATT&CK to produce
a quantitative scorecard that
helps us understand where we are
today and where we need to be tomorrow.
For example, we can document our priorities
by highlighting the techniques
that are most critical for us to defend.
We can also identify gaps by selecting
the subset of techniques that we have defenses for.
This process analysis can inform decision-making,
particularly in this case,
by comparing what techniques are most important to us,
with what techniques we have defenses for.
We can identify where we need to improve.
That was just one notional and very simple way
of using ATT&CK as a quantitative scorecard.
We can do a similar approach for
the various other metadata ATT&CK,
such as data sources,
detections and analytics, mitigations and more.
With that, we've reached
our knowledge check for Lesson 3.
True or false, ATT&CK will explicitly
provide a score of how
safe your organization's defenses are.
Please pause the video and take a second to
think of the correct answer before proceeding.
In this case, the correct answer is false.
ATT&CK provides means of
creating a quantitative scorecard,
but it's up to you to provide
the inputs and the analysis.
With that we've reached the end of Lesson 3.
In summary, we can use ATT&CK to
build quantitative scorecards that enable
us to ask tough questions and measure how
our defenses compare against real adversary behaviors.