measurablesecurity.mitre.orgMaking Security Measurable

A Collection of Information Security Community Standardization Activities and Initiatives MITRE, in collaboration with government, industry, and academic stakeholders, is improving the measurability of security through registries of baseline security data, providing standardized languages as means for accurately communicating the information, defining proper usage , and helping establish community approaches for standardized processes . The other activities and initiatives listed here have similar concepts or compatible approaches to MITRE’s. Together all of these efforts — be they mature or continuing to build momentum — are helping to make security more measurable by defining the concepts that need to be measured, providing for high fidelity communications about the measurements, and providing for sharing of the measurements and the definitions of what to measure. Home | About | MSM Directory of Efforts | Incubator | Events & Participation | Search | Feedback Measurable security pertains at a minimum to the following areas: Software Assurance Application Security Asset Management Supply Chain Risk Management Cyber Intelligence Threat Analysis Cyber Threat Information Sharing Vulnerability Management Patch Management Configuration Management Malware Protection Intrusion Detection System Assessment Incident Coordination Enterprise Reporting Remediation This website is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2007–2020 The MITRE Corporation. MITRE, the MITRE logo, CVE, and the CVE logo are registered trademarks and the logo, CWE, the CWE logo, CAPEC, the CAPEC logo, MAEC, the MAEC logo, CWSS, the CWSS logo, CWRAF, the CWRAF logo, and Recommendation Tracker are trademarks of The MITRE Corporation. All other trademarks are the property of their respective owners. All other trademarks are the property of their respective owners. Contact us: measurablesecurity@mitre.org Page Last Updated: July 08, 2013...