Translating Complexity. Empowering Oversight.

Mapping to MITRE ATT&CK

The CRI Profile now aligns directly to the MITRE ATT&CK Framework, connecting high-level cybersecurity risk management to real-world adversary behaviors.

Key Features

Developed in collaboration with MITRE’s Center for Threat-Informed Defense (CTID), this mapping helps financial institutions bring together governance, regulatory expectations, and threat mitigations tailored for the financial sector.

Explore the Mappings

Together, these resources help your team strengthen security posture and align operational controls with strategic risk frameworks.

Mapping to MITRE ATT&CK

MITRE ATT&CK mapping to the CRI Profile to help connect threats to compliance.

Download File →

MITRE's CTID’s Mapping Explorer

View ATT&CK techniques and their alignment to the CRI Profile in an interactive format

View Project →

Trusted Standards for Evolving Risks.

The Cyber Risk Institute mission is to advance the development and harmonization of cybersecurity, technology, and AI risk management standards for the financial services industry.

As a not-for-profit standards development organization, CRI connects threats to mitigating controls and associated compliance to provide institutions with a comprehensive view of risk—from the server room to the boardroom.

We do this through our products - CRI Profile, Cloud Profile, and FS AI RMF – member engagement, and an ecosystem of globally known tool providers and consulting firms.