Local and Foreign Vulnerabilities and Threats

Assignment: Analyze Local and Foreign Vulnerabilities Plus Threats RESOURCES • Vulnerability Management Carnegie Mellon University. (2016). Vulnerability management. Cybersecurity & Infrastructure Security Agency, Cyber Resilience Review. This document is important because it provides a good overview of the creation and administration of a vulnerability management program. • MITRE ATT&CK 101 Strom, B. (2018, September). ATT&CK 101. MITRE Corporation. This blog post is important because it provides the reader with an overview and rationale behind the MITRE ATT&CK framework. This cyber attacker framework is used by most Fortune 500 organizations to map attacker activities to defensive capabilities. • MITRE ATT&CK Groups MITRE Corporation. (n.d.). ATT&CK Groups. This website provides in-depth information on well-known cyber-attack groups • Cyber Threat Dictionary Using MITRE ATT&CK Matrix and NIST Cybersecurity Framework Mapping Kwon, R., Ashley, T., Castleberry, J., Mckenzie, P., & Gupta Gourisetti, S. N. (2020). Cyber Threat Dictionary Using MITRE ATT&CK Matrix and NIST Cybersecurity Framework Mapping. 2020 Resilience Week (RWS), Resilience Week (RWS), 2020, 106–112. https://doi.org/10.1109/RWS50334.2020.9241271 This document is useful because it links MITRE’s ATT&CK framework with the NIST CSF. Companies struggle to link frameworks together like this, but it’s very useful when you have a map. . Instructions For this assignment, you have been assigned by CISO to develop a briefing report of the top attacker groups that present a threat to a large research university system. As the Cyber Intelligence Team manager, you will provide senior security leadership an overview of which groups present a credible threat to the university’s institutional research operations, intellectual property, and data collected from human subjects and stored on university systems. The university is interested in adopting the MITRE ATT&CK framework and would like you to recommend mitigations based on the tactics of the groups you identify. Your paper should include the following: • An overview of the MITRE ATT&CK framework and how it’s used. • An overview of the major groups attacking higher education research institutions. • • An overview of the main tactics, techniques, and procedures (TTP’s) that those groups use when operating. Identify mitigating controls the higher education research institutions can use based on the TTP’s and MITRE’s ATT&CK framework Length: 5 to 7-page paper, excluding title and reference pages. References: Include a minimum of 2 scholarly references in addition to those used in the course resources. The completed assignment should address all of the assignment requirements, exhibit evidence of concept knowledge, and demonstrate thoughtful consideration of the content presented in the course. The writing should integrate scholarly resources, reflect academic expectations and current APA standards. . .