07What is MITRE ATLAS, how does it relate to ATT&CK, and how would you map an incident to it?▼mediumNewMicrosoftCrowdStrikePalo Alto Networks○ sign inKnowing the acronym is the easy part. Mapping a real attack chain onto tactics, and saying what that mapping is useful for, is what gets scored.Open full answer →
26How do the OWASP Top 10 lists, MITRE ATLAS and the NIST AI RMF fit together on one project? Map prompt injection across all three.▼mediumNewMicrosoftGoogleJPMorgan Chase◆ premiumThree frameworks, three different questions: what can go wrong in what we build, how attackers actually operate, and how the organisation manages the risk. Using one for another's job is the common mistake.Open full answer →