Define your organization's mitigation coverage so that you can effectively measure and detect specific adversary techniques.

Table 1. MITRE ATT&CK Technique Mitigation Coverage Definitions
Overall Technique Mitigation CoverageCoverage Percentage Lower LimitCoverage Percentage Higher LimitCoverage ColorDescription
None 0 0 #DD8581 You have no technique mitigation coverage, and your defence controls have no ability to prevent an attack in any scenario.
Poor 1 20 #EABA75 You have minimal technique mitigation coverage. The chances of an attack are very high, and your defence controls can prevent an attack in 0 to 20 percent of the scenarios.
Fair 21 40 #F4F0BF You have an average technique mitigation coverage. The chances of an attack are high, and your defence controls can prevent an attack in 21 to 40 percent of the scenarios.
Good 41 60 #D9EBEE You have a good technique mitigation coverage. However, the chances of an attack are relatively high, and your defence controls can prevent an attack in 41 to 60 percent of the scenarios.
Very Good 61 80 #C3DDF0 You have a very good technique mitigation coverage. The chances of an attack are low, and your defence controls can prevent an attack in 61 to 80 percent of the scenarios.
Excellent 81 100 #68ABDA You have an excellent technique mitigation coverage and the chances of an attack using this technique is very low and your defence controls can prevent an attack in 81 to 100 percent of the scenarios.