Verizon Threat Research Advisory Center MIB: Categorizing cybersecurity incidents with the VERIS Framework

Join the Verizon Threat Research Advisory Center for an introduction to the VERIS Framework – the incident classification standard behind the Verizon Data Breach Investigations Report (DBIR). Our guest for this month's briefing is Alex Pinto, Associate Director of Threat Intelligence and DBIR co-author at Verizon. In addition to being used by the Verizon DBIR team, the VERIS Framework is leveraged by private organizations and government agencies all over the world. They use it to represent their incidents and security events as a part of their Governance, Risk and Compliance (GRC) programs, or to help record them for breach disclosure requirements mandated by some industries and regions of the world. We will provide an overview of the important concepts of VERIS, its most important categorizations (the 4As - Actor, Action, Asset and Attribute) and provide several examples of VERIS categorization of public real-world breaches from 2025 in the VERIS Community Database (VCDB). If you have any questions related to cyber intelligence that you'd like us to cover on the call, please send them to the following email address: Threat.Intel@verizon.com.