{"id":3300,"date":"2024-04-26T16:33:25","date_gmt":"2024-04-26T21:33:25","guid":{"rendered":"https:\/\/www.darkreading.com\/threat-intelligence\/mitre-s-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert"},"modified":"2024-04-26T16:33:25","modified_gmt":"2024-04-26T21:33:25","slug":"mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/04\/26\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert\/","title":{"rendered":"MITRE’s Cyber Resiliency Engineering Framework Aligns With DoD Cyber Maturity Model Cert"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

PRESS RELEASE<\/span><\/span><\/p>\n

McLean, Va. & Bedford, Mass., April 25, 2024 <\/span><\/span>\u2014 MITRE\u2019s <\/span>Cyber Resiliency Engineering Framework (CREF) NavigatorTM<\/a><\/span> now incorporates the US Department of Defense\u2019s <\/span>Cybersecurity Maturity Model Certification (CMMC)<\/a><\/span> so cybersecurity engineers for the Defense Industrial Base (DIB) can strengthen supply chain resilience against sophisticated cybersecurity attacks. The CREF Navigator aligns with NIST SP 800-171, the National Institute of Standards and Technology\u2019s (NIST) publication designed to safeguard Controlled Unclassified Information (CUI) and the subset of NIST SP 800-172 that aligns with the proposed CMMC Level 3 model which has 24 of the 34 security requirements that address more sophisticated cybersecurity attacks.<\/span><\/p>\n

\u201cOur national security depends on the security of our defense systems and the supply chains to enable that defense,\u201d said Wen Masters, vice president, cyber technologies, MITRE. \u201cAll along the supply chain, you need accountability in following the appropriate security requirements to build a resilient system. Resilience in the face of a cyber-attack is not a quick fix. Resiliency must be engineered before an incident.\u201d<\/span><\/p>\n

MITRE in partnership with NIST created the original cyber resiliency framework, <\/span>NIST SP 800-160, Volume 2 (Rev. 1)<\/a><\/span>. The CREF Navigator, which debuted in early 2023, makes that NIST framework searchable and visualized. With the tool, engineers can make educated and informed choices while designing resilient cyber solutions. Beyond pairing with CMMC, the CREF Navigator also aligns with the MITRE ATT&CK\u00ae knowledge base of tactics and techniques and Cyber Model-Based Systems Engineering (MBSE) for cyber threat modeling.<\/span><\/p>\n

\u201cTo allow cyber engineers to customize the tool for their individual needs, we enhanced the CREF Navigator so users can create their own scenarios and apply different parameters of threats and techniques,\u201d said Shane Steiger, principal cybersecurity engineer, MITRE. \u201cRegardless of how you keep your security data, you can import your data into the CREF Navigator via a .csv file, and the visualization of the data can be exported back out to a .csv file. Later this year, we\u2019ll add enhancements for Zero Trust Architectures.\u201d<\/span><\/p>\n

As with many of MITRE\u2019s resources for cyber defenders that are developed in the public interest, the CREF Navigator is freely available to the greater cyber community. See the CREF Navigator in action at <\/span>https:\/\/CREFNavigator.mitre.org<\/a><\/span>.<\/span><\/p>\n

About MITRE<\/span><\/span>
MITRE\u2019s mission-driven teams are dedicated to solving problems for a safer world. Through our public-private partnerships and as an operator of federally funded R&D centers, we work across government and in partnership with industry to tackle challenges to the safety, stability, and well-being of our nation. Learn more at <\/span>mitre.org<\/a><\/span>.<\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

PRESS RELEASE McLean, Va. & Bedford, Mass., April 25, 2024<\/p>\n","protected":false},"author":12,"featured_media":3301,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-3300","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=3840%2C2160&ssl=1",3840,2160,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=640%2C360&ssl=1",640,360,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=1536%2C864&ssl=1",1536,864,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=2048%2C1152&ssl=1",2048,1152,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=1024%2C576&ssl=1",1024,576,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/mitres-cyber-resiliency-engineering-framework-aligns-with-dod-cyber-maturity-model-cert.png?fit=3840%2C2160&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3300"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3300\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/3301"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}