This makes me think of a librarian saying "we have 100% coverage of the dewey decimal system" about their library. It's more than a "common language", though — there's structure which might connect to other structures like attack trees. Would it make sense to e.g. systematically evaluate the MITRE matrix at each point in an org's attack tree to see which tactics and techniques apply in order to populate missing edges?
This makes me think of a librarian saying "we have 100% coverage of the dewey decimal system" about their library. It's more than a "common language", though — there's structure which might connect to other structures like attack trees. Would it make sense to e.g. systematically evaluate the MITRE matrix at each point in an org's attack tree to see which tactics and techniques apply in order to populate missing edges?
Yes!