Does your organization regularly conduct self-assessments of critical services that incorporate current threat intelligence and adversary tactics, techniques, and procedures (TTPs)?

Regular self-assessments help identify vulnerabilities in critical services before they can be exploited by threat actors using current attack methods. These assessments should specifically consider the latest threat intelligence and known TTPs being used by adversaries targeting your industry or similar organizations. This proactive approach allows organizations to prioritize security improvements based on actual threat data rather than theoretical risks. Evidence of fulfillment could include documented self-assessment reports that reference specific threat intelligence sources, identify which critical services were assessed, detail the TTPs considered during the assessment, and outline findings and remediation plans with timelines. These reports should demonstrate a regular cadence of assessments (e.g., quarterly or after significant threat landscape changes).