Present DISARM Blue Framework TTPs as Controls in Reports

[KadeMorton]

Description

To enhance the utility of the reports generated by Thread, we need to develop functionality that shows each DISARM Red Framework TTP (Tactics, Techniques, and Procedures) against its corresponding DISARM Blue Framework TTPs. This mapping should already be present but it may need to have functionality built around it. These mappings should be presented as actionable controls in the generated reports, providing users with both offensive and defensive perspectives.

Task

• Report Integration: Implement functionality within the report generation process to automatically include the mapped DISARM Blue Framework TTPs in reports where DISARM Red Framework TTPs are identified.
• UI/UX Design for Control Presentation: Design and implement a user-friendly interface within the reports that clearly presents the mapped DISARM Blue Framework controls alongside their corresponding DISARM Red Framework TTPs.
• Testing and Validation: Conduct thorough testing to ensure that the mappings are accurate and that the controls are correctly presented in the reports. Validate that the controls provide clear and actionable guidance for users.
• Documentation and User Guidance: Update documentation to explain the new functionality and provide users with guidance on how to interpret and apply the DISARM Blue Framework controls in their cybersecurity practices.

Acceptance Criteria

• Integration of the mapped controls into the report generation process, ensuring they are presented clearly and correctly in the reports.
• Completion of testing with no major issues affecting the accuracy or presentation of the controls in the reports.
• Positive feedback from users on the utility and clarity of the DISARM Blue Framework controls in the reports.
• Updated documentation that provides clear instructions on how to use the new functionality.

Steps

1. Integration and UI/UX Design: Develop and integrate the functionality for presenting controls in reports, including UI/UX design.
2. Testing and Validation: Conduct testing and validation to ensure accuracy and user-friendliness of the new functionality.
3. Documentation and User Training: Update documentation and provide user guidance post-testing.