From Attacks to Action: An Open Community Model to Drive Defensive Choices
summary
The CIS Community Defense Model CIS CDM maps Verizon DBIR attack summaries through MITRE ATT&CK to CIS Controls and Benchmarks, then scores specific safeguards for Implementation Group 1–3; results show IG1 (18 controls) defends against the top five threats including ransomware. Tooling includes the CSAT self‑assessment used by ~30,000 organizations, a FAIR‑based business impact analysis for ransomware, and a Navigator cross‑mapping to other frameworks; the model produces security‑value metrics to prioritize and quantify defensive choices.
AI-written summary · about
chapters (8)
- 0:00Community-driven cybersecurity
- 3:30Cyber defense fog of war
- 10:17Expert judgment to controls
- 16:20Community defense model
- 24:11Measuring security value
- 31:03Security frameworks ecosystem
- 37:02Call to action and tools
- 42:01Closing cybersecurity thoughts
related talks
27mFrom Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
46mCyber Defense Matrix: Revolutions
40mHow CISA Is Charting a Path Toward Defensible Infrastructure
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
32mResilient Secure Software Development Through Insights Learned from Adversarial Attack Campaigns
01h 11m2024 Security BSides // Adam Pennington
40mProtecting What Matters Most – Tools for Managing Risk