diff --git a/docs/components/tne.rst b/docs/components/tne.rst index 7b7524d..2dd3d6b 100644 --- a/docs/components/tne.rst +++ b/docs/components/tne.rst @@ -2,13 +2,13 @@ Test & Evaluation ================== -This section outlines the key components that have been identified for the Test & Evaluation dimension as well as maturity levels within the components. These components and -levels form the basis for assessing how threat informed an organization’s T&E program is. This assessment can be conducted using the companion spreadsheet published with this -white paper. +This section outlines the key components that have been identified for the Test & Evaluation dimension as well as maturity levels within the components. These components and levels form the basis for assessing how threat informed an organization’s T&E program is. This assessment can be conducted using the companion spreadsheet published with this white paper. Type of Testing ---------------- +Are cybersecurity tests focused on helping defenders improve against prioritized threats? + 1. None 2. Security Control / Risk Assessment (reactive, compliance-focused) 3. Vulnerability Assessment / Penetration Test (reactive, threat-focused) @@ -19,6 +19,8 @@ Type of Testing Frequency of Testing ----------------------------- +Do your tests keep pace with changing adversaries and defended technologies? + 1. None 2. Annual 3. Semi-Annual @@ -29,6 +31,8 @@ Frequency of Testing Test Planning ------------------------ +Are tests coordinated and prioritized on the most relevant threat behaviors? + 1. None 2. Ad hoc 3. Deliberately planned and scoped, informed by Threat Actor or prioritized TTPs [#f3]_ @@ -39,6 +43,8 @@ Test Planning Test Execution --------------------------------- +Does testing cover adversary TTPs in addition to traditional IOCs? + 1. None 2. Scanners or other tooling, not threat-focused 3. Commodity tooling, IOC-focused @@ -49,6 +55,8 @@ Test Execution Test Results --------------------------------- +How effectively do test results cause improvements in defensive measures? + 1. None 2. Results generated 3. Results generated, leadership interest, actions taken