Boosting Cyber Risk Assessment in Government Entities through Combined NIST and MITRE ATT&CK Threat Modeling

This study is driven by the imperative to cultivate a comprehensive framework for identifying and mitigating cyber threats within government organizations, a critical need in the ever-evolving cybersecurity landscape.This research addresses a conspicuous research gap by developing an integrated threat modeling approach that marries the NIST SP 800-30 and MITRE ATT&CK frameworks, offering a transformative path toward enhanced cyber risk management for government entities.The research problem lies in the absence of a systematic methodology for prioritizing and mitigating cyber threats within government environments.This gap is especially prominent in the Asian context, where a coherent framework for dealing with these threats is urgently required.To rectify this situation, our study introduces an innovative approach that harmonizes the well-structured risk assessment processes outlined in NIST SP 800-30 with the MITRE ATT&CK-based analytic development method.NIST SP 800-30 provides a meticulous framework covering threat analysis, vulnerability assessment, probability analysis, impact determination, and control analysis-a systematic guide for identifying and evaluating potential risks encountered by organizations.In parallel, the MITRE ATT&CK-based analytic development method enables in-depth exploration of potential attacks by referencing adversary techniques.This empowers organizations to proactively uncover potential threats and craft precise mitigation strategies.Our research's primary goal is to bridge this critical gap by leveraging the MITRE ATT&CK framework to analyze and categorize threats, thereby streamlining cybersecurity strategies.By merging these two approaches, organizations can utilize NIST SP 800-30's structured framework to establish a consistent risk assessment structure while deploying the MITRE ATT&CK-based method for detailed threat analysis and precise mitigation strategy development.This synergy amplifies organizations' capability to holistically and effectively combat information security threats.By identifying frequently used techniques with high-risk scores, organizations can optimally allocate resources, bolster security measures, and strategically channel cybersecurity efforts where they are most essential.This research serves as a practical blueprint for enhancing government organizations' resilience and detection capabilities in the face of ever-evolving cyber threats