Benchmarking Threat Resilience Metrics aka How Do We Compare to Our Peers?
summary
Industry groups produce compact, repeatable MITRE ATT&CK-based VECTR.io platform test plans (public JSON on GitHub) that focus on 50 test cases derived from top adversaries for Financial Services, Health, Retail and OT; workshops (5–6 over ~6 weeks) produce purple‑team runs that take 2–4 days, classify outcomes as blocked/alerted/centrally logged/local telemetry/none, and yield a single Threat Resilience Benchmark (typical mid‑50s%, best ~85%), enabling twice‑yearly benchmarking and prioritized remediation planning.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 5:35NIST CSF 2.0 icebreaker
- 15:19Threat resilience challenges
- 21:46Industry threat indexes
- 25:38Vulnerability vs visibility
- 30:48Benchmark scoring explained
- 35:04VECTR platform demo
- 41:00Purple team workshops
- 43:07Analyzing exercise results
- 46:21MITRE ATT&CK heatmaps
- 49:52Executive storytelling
- 53:04Key takeaways
related talks
53mMetrics that Matter.Confidence & Resilience in Your Security Program
30mShall We Play a Game?
40mAdversary Simulation: Close the Gaps in Your Security Posture
21mUnderstanding the Latest Mitre Att&Ck Evaluation Data
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
40mCybersecurity Metrics Development for Board and Risk Committee Reporting
28mEnvironments and Benchmarks for Cybersecurity Agents
58mMITRE ATT&CK for Developers