MITRE ATT&CK Framework for Mobile Devices

The MITRE ATT&CK framework is a knowledge base of cyber adversary behavior and classifications for adversarial actions across their lifecycles. MITRE ATT&CK for Mobile covers techniques and network-based effects that can be used by adversaries without device access, such as phishing. ATT&CK provides mitigation activities for both the iOS and Android platforms that can be used to bolster security awareness program activities (such as those required by CIP-004-7).

Texas RE encourages Responsible Entities to utilize the MITRE ATT&CK framework to bolster their device security to better prevent network-based attacks.