Secure by Design Procurement Controls
Requiring Secure by Design / Secure by Default products from vendors; the CISA initiative shifts security responsibility to the manufacturer.
ZT: verify explicitlyProcurement / GovernanceWindowsLinuxCloud
TA0042Defense Plan
Resource Development
Preparing resources and infrastructure for the attack
M1019Threat Intelligence Program
Collecting relevant threat actor/TTP/IOC intelligence and integrating it into defense.
ZT: assume breachCTI ProgramWindowsLinuxmacOSNetworkCloud