We’re very pleased to welcome Jon Baker to the Board of the FAIR Institute, and kick off a partnership to research how two standards, FAIR for cyber risk management and MITRE ATT&CK® for threat intelligence, could be brought together for the greater benefit of the cybersecurity community.
Jon is Director and Co-Founder of the Center for Threat-Informed Defense, a non-profit, privately funded research and development organization operated by MITRE Engenuity, home of the MITRE ATT&CK framework, the knowledge base of attacker tactics and techniques widely used on the operational side of cybersecurity.
Jon is a distinguished pioneer of threat intelligence research as former leader of MITRE‘s Cyber Threat Intel and Adversary Emulation department where he oversaw the MITRE ATT&CK program and development of the OASIS STIX and TAXII standards for sharing threat intel.
In this Meet a Member podcast, Jon explains the benefits of cooperation between the FAIR Institute and the Center for Threat-Informed Defense:
“Operational cybersecurity teams and the risk management teams have been more siloed than they ought to be, and I’d like to change that…It's my belief that risk quantification needs to be connected to what the operational security teams are doing…
“When you bring threat- informed defense and MITRE ATT&CK together with FAIR, I think it creates the opportunity to drive towards very high-fidelity risk assessments in which we can use threat intelligence to refine that set of behaviors to those that are directly relevant to your organization.”
Jon gave a preview of how FAIR and ATT&CK could be combined in a session at the 2023 FAIR Conference, Connecting Threat Intel to Risk with MITRE ATT&CK and FAIR.
We discussed the exciting possibilities of our combined research in this conversation:
Stay on top of the latest creative thinking in cyber risk management. Join the FAIR Institute!
