Published by ODA3 InstituteGAISSF™ to MITRE ATT&CK Crosswalk
ID GAISSF-CRO-026
Framework GAISSF™ Type Crosswalk
Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.
What it coversGAISSF-CRO-026 documents defensive relationships between all 59 GAISSF™ v1.0 controls and a source-bounded priority set of 100 MITRE ATT&CK Enterprise techniques across the current 15 Enterprise tactics.
Use it whenTranslate adversary behavior into GAISSF control and evidence requirements; Support SOC, threat-intelligence, red-team, purple-team, architecture, and assurance collaboration; Identify control, telemetry, detection, resilience, and testing gaps.
Scope and limitsPriority-set tactic coverage does not establish complete ATT&CK Enterprise technique/sub-technique coverage, procedure coverage, platform-specific detection coverage, validated telemetry, evidence sufficiency or operating effectiveness.
Edition mappedMITRE ATT&CK v19, Enterprise
Revision history
| Date (as stated) | Event | What changed |
|---|---|---|
| 2026 | Publication | Published as v1.0Source: Page metadata (/crosswalks/cro-026-mitre-attack/) |
| 6 October 2026 | Document revision | Draft for Publication issued, public and in full; independent crosswalk review openSource: GAISSF-CRO-026_GAISSF-MITRE-ATTACK-Mapping_v1.0.pdf |
Website record last updated 7 October 2026. This is the web page, not the document.
More from GAISSF™
| SEC-047 | GAISSF™ Telecommunications Sector Implementation Guide |
| NOR-001 | GAISSF™ Framework Standard |
| NOR-002 | GAISSF™ Executive Summary |
| NOR-003 | GAISSF™ Quick Start Guide |
Cite this document
ODA3 Institute. GAISSF™ to MITRE ATT&CK Crosswalk (GAISSF-CRO-026), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-026/
ODA3 Institute. GAISSF™ to MITRE ATT&CK Crosswalk (GAISSF-CRO-026), v1.0. Published 29 June 2026. docs.oda3.org/documents/cro-026/