Skip to content

Active Defense

What is Active Defense?

Security strategies that proactively seek to detect, respond to, and counter adversary actions rather than relying solely on passive preventive measures.

Information Security

Frameworks that govern active defense

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on active defense

Requirements naming active defense across 2 standards, quoted from the control text.

MITRE ATT&CK1 control

Establish the scope of MITRE ATT&CK (Adversarial Tactics Techniques and Common Knowledge) - globally accessible knowledge base of adversary tactics and techniques based on real-world observations.

MITRE-ATTACK-Scope-Adversarial-Tactics-Techniques-MITRE-Corporation-2013-v15-v16-Enterprise-Mobile-ICS-Cloud · MITRE ATT&CK Scope + MITRE Corporation 2013 + v15 + v16 + Enterprise + Mobile + ICS + Cloud + Container →
MITRE D3FEND1 control

Apply D3FEND DECEIVE tactic to present false data and impressions to adversaries to misdirect their efforts. D3-DE Decoy Environment (D3-DST Decoy Session Token + D3-DPB Decoy Public Release + D3-CDE Connected Honeynet + D3-DUC Decoy User Credential + D3-IDA I...

MITRE-D3FEND-Deceive-Tactic-Decoy-Environment-Decoy-Object-Honeypots-Honey-Tokens-Decoy-Network · MITRE D3FEND Deceive Tactic + Decoy Environment + Decoy Object + Honeypots + Honey Tokens + Decoy Network →

Questions people ask about active defense

What is Active Defense?
Security strategies that proactively seek to detect, respond to, and counter adversary actions rather than relying solely on passive preventive measures.
Why is Active Defense important for compliance?
Active Defense is a key concept in Information Security. Understanding active defense helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Active Defense?
Active Defense appears in the requirement text of MITRE ATT&CK, MITRE D3FEND. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Active Defense?
Explore our compliance framework pages to see how active defense applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Active Defense applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.