Verizon Threat Research Advisory Center Monthly Intelligence Briefing (January 2021): Starting the Year on the Right Note: Using VERIS
VERIS stands for the Vocabulary for Event Recording and Incident Sharing. The VERIS A4 Threat Model—Actors, Actions, Attributes, Assets—can be used to gain insight into data breaches and cybersecurity incidents. VERIS underlies the Verizon DBIR, CER, and PSR. Suzanne Widup, Verizon DBIR Team, and John Grim, VTRAC Team, will cover how to use VERIS and the A4 Threat Model to:
· Collect and share useful incident-related information
· Compare incidents occurring in your organization with the DBIR, CER, and PSR findings
· Identify data breach countermeasures to implement