Operationalising metrics¶

Quarterly improvement cycle¶

1. Baseline assessment

   • Run Atomic Red Team tests against current defenses.

   • Generate ATT&CK heatmap.

2. Gap analysis

   • Prioritize using the DETT&CT framework

3. Remediation sprint

   • Develop 3-5 new detection rules (Sigma/YARA).

   • Update 1-2 response playbooks.

4. Validation

   • Re-run tests and compare metrics.