Recently, the MITRE Corporation published ATT&CK®️ for ICS, which is “ a knowledge base useful for describing the actions an adversary may take while operating within an ICS network”. It is a recent addition to the already established ATT&CK®️ framework originally published for general purpose networks.

This document is Tenable’s response to the framework and what Tenable’s “take” is on addressing and securing the OT environment.