MITRE ATT&CK & NIST 800-53 Mapping (06/23/2025)
Over the weekend, I had plans to map MITRE ATT&CK to CISA CVEs, NIST 800-53, Azure and M365. I knew the task was going to be challenging.
I knocked out the mapping for CISA and MITRE but have a few minor details to conquer with NIST 800-53.
I have finally conquered them. In all, 33,579 mappings have been magically connected between MITRE ATT&CK and NIST 800-53.
The next step is to tie the CVEs and NIST mappings with MITRE back to the GRC plans for additional help with answering these controls.
I still plan on mapping Azure and M365 by next weekend.
BCWHS.com
