MITRE Maps ATT&CK to 800-53 Controls

[xee5ch]

But ... they are using Excel spreadsheets! I guess someone has to convince them to adopt OSCAL! :-) They have in the last month upgraded mappings for 800-53 controls from Rev 4 to Rev 5.

https://github.com/center-for-threat-informed-defense/attack-control-framework-mappings/tree/main/frameworks/attack_10_1/nist800_53_r5

They have a methodology but it is a little light on details. Thoughts from the community?