topic Re: Zero Trust Architecture: ISO vs. MITRE ATTACK in Governance, Risk, Compliance

Zero Trust Architecture: ISO vs. MITRE ATTACK

Caute_cautim — Wed, 21 Aug 2024 02:48:34 GMT

Hi All

A great resource:

https://jasonlayton.com/cybersecurity/8-2024/zero-trust-architecture-iso-vs-mitre-attack

Regards

Caute_Cautim

Re: Zero Trust Architecture: ISO vs. MITRE ATTACK

CST71 — Mon, 02 Sep 2024 19:07:37 GMT

Hi Caute,

Thank you for the great resource. I have a question: what are your thoughts on adding AI-based network detection and response to NIST 800-53 and the MITRE framework? Is it feasible for SMBs to do that, though? Thank you in advance.

Re: Zero Trust Architecture: ISO vs. MITRE ATTACK

Caute_cautim — Tue, 17 Sep 2024 02:48:27 GMT

@CST71 First of all apologies for my tardy response - I was changing organisations and going through the disruption process of handing back equipment and being terminated as one should be when you leave one organisation and go to another.

My thoughts, a good idea - depending on what perspective you are coming from - from a Cloud Provider perspective, they are likely to add it as a service or a feature. Azure Well Architected Framework - provides a self assessment tool, as long as you enable the paid subscription version of Defender for Cloud.

Given the availability of various AI models, it would not surprise me that will feed NIST SP800-53 and compare with the MITRE framework and experiment with it. Early models would have to be thoroughly tested to ensure they work corrected or adjusted accordingly.

Regards

Caute_Cautim

Re: Zero Trust Architecture: ISO vs. MITRE ATTACK

CST71 — Wed, 18 Sep 2024 12:37:34 GMT

Hi Caute,

Thank you so much for your response. I hope you are enjoying your new role!

What I find helpful is your perspective on cloud providers adding AI-based network detection and response as a service or feature.

Thanks again!