Adversary Emulation with MITRE ATT&CK

Chapter 10. Engagement Planning

Engagement planning exists at the intersection of cybersecurity and strategic planning. Now, when digital interactions permeate every aspect of life, this intersection becomes a moment of utmost significance. The holistic approach to mapping the trajectory of the emulation exercise is an integral part of the adversary emulation (AE) process that allows the framing of the operation’s scope, objectives, and logistics. It determines what will be tested, how it will be tested, who will test it, when it will occur, and how the findings will be reported and responded to. This approach is not a one-size-fits-all blueprint; it’s an optimized plan to augment the emulation exercise’s effectiveness.

AE embodies the intricacies of a sophisticated chess match, where the mastery of foreseeing the adversary’s actions can tip the scales between triumph and defeat. It is not merely about erecting defenses but also about understanding the strategies of your adversaries—understanding not just their actions but also their potential motivations, resources, and strategies. However, the successful execution of such complex exercises necessitates a commitment to thorough and careful planning. Engagement planning is a systematic process that involves identifying and assessing objectives and goals for a specific task, project, or campaign. It encompasses understanding the scope of the engagement, identifying the necessary resources, establishing a timeline, and preparing ...