{"id":50387,"date":"2023-02-03T03:00:00","date_gmt":"2023-02-03T03:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/dr-tech\/mitre-releases-tool-to-design-cyber-resilient-systems"},"modified":"2023-02-03T03:00:00","modified_gmt":"2023-02-03T03:00:00","slug":"mitre-releases-tool-to-design-cyber-resilient-systems","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/mitre-releases-tool-to-design-cyber-resilient-systems\/","title":{"rendered":"MITRE Releases Tool to Design Cyber Resilient Systems"},"content":{"rendered":"
<\/div>\n
\n
\n

Cyberattacks are on the rise and enterprise defenders are protecting an increasingly expanding and complex attack surface. For many organizations, the focus is shifting away from prevention to resilience<\/a> \u2014 to maintain essential business functions during an attack and recover quickly without losing too much downtime. Towards that end, MITRE released the Cyber Resiliency Engineering Framework (CREF) Navigator<\/a>, a free visualization tool for engineers designing cyber resilient systems.<\/p>\n

The Navigator helps organizations customize their cyber resiliency goals, objectives, and techniques, as aligned by NIST SP 800-160<\/a>, which outlines standards on developing cyber-resilient systems. MITRE integrated the MITRE ATT&CK techniques and mitigations into the Navigator tool to help engineers understand how the systems they are designing could be targeted.<\/p>\n

Resiliency is something that is engineered into the system \u2013 it doesn’t just happen. The CREF framework guides engineers along four key principles: Anticipate (informed preparedness), Withstand (continue business functions even while under attack), Recover (restore business functions after an attack), and Adapt (change to minimize impact of attack).<\/p>\n

The tool makes it possible to search and visualize the cyber resiliency framework so that engineers can “make educated and informed choices,” Shane Steiger, MITRE’s principal cybersecurity engineer, said in a statement.<\/p>\n

Companies are looking at cyber resilience as part of their strategy to prevent incidents and mitigate losses when they occur, according to Cisco’s annual Security Outcomes Report<\/a>: 96% of executives surveyed named security resilience as high priority. The report identified some actions that helped increase resilience:<\/p>\n