Framework for Improving Critical Infrastructure Cybersecurity/ATT and CK Mapping

The CSF is a risk-based approach to managing cybersecurity risk, and is composed of three parts the Framework Core, the Framework Implementation Tiers, and the Framework Profiles. Each Framework component reinforces the connection between businessmission drivers and cybersecurity activities. This workbook maps elements of the Framework Core to the Enterprise tactics and techniques presented in ATT and CK. The mapping aligns the mitigation and detection guidance for ATT and CK techniques to Framework Core subcategories that support this guidance.