MITRE’s Cyber Resiliency Engineering Framework (CREF) Navigator, “a relational database of NIST SP 800-160 Volume 2 concepts that is searchable, visualizes resilience relationships & presents a Web UI while utilizing portable, opensource components to enable use in tools. The CREF Navigator distills tons of useful terms, tables, and relationships from the CREF/NIST SP 800-160 Volume 2 into an online tool.”
Note
- The idea is to create a tool to help you make informed and educated choices to increase your cyber resiliency. For example, surveys found that EDR capabilities correlated to a 45% increase in resilience score, vs having no detection and response capability. Spend a bit of time drilling down, investigating options you may not have considered as well as digging deeper on topics you may only have heard of, or not had time to consider. The tool provides context which includes approach, implementation technique, related NIST SP 800-53 controls and mitigations.
Read more in