The next level of the use of MITRE ATT&CK in an enterprise environment is what this session is about: linking threat informed defense with controls and control frameworks. This session will explore how to make sure relevant risks are mitigated in an effective and efficient manner and how to link this to controls and reporting.