T/CSAC 001-2023 Active

Scope: This document describes the method of conducting security assessments on information systems, security products, and other objects in a cyber range environment based on the attack tactics model, including basic concepts, process requirements, and evaluation methods. This document is applicable to guiding assessors in conducting security assessments based on the cyber range and in accordance with the attack tactics model; Main technical content: The "Cyber Range - Security Assessment Method Based on Attack Tactics Model" (T/CSAC 001—2023) describes the method of conducting security assessments on information systems, security products, and other objects in a cyber range environment based on the attack tactics model, including basic concepts, process requirements, and evaluation methods. Specifically, based on the ATT&CK model, it provides guidance for organizations to conduct assessments from the full process of formulating a security assessment plan, establishing an assessment implementation team, setting up an assessment environment, constructing attack tactics, systematically simulating attacks, executing assessments, quantitatively evaluating results, and determining outcomes.