Skip to content

Cyber Kill Chain

What is Cyber Kill Chain?

A model developed by Lockheed Martin that describes the stages of a cyber attack: reconnaissance, weaponisation, delivery, exploitation, installation, command and control, and actions on objectives.

Information Security

Frameworks that govern cyber kill chain

NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on cyber kill chain

Requirements naming cyber kill chain across 2 standards, quoted from the control text.

Japan FSA Cybersecurity Guidelines for Financial Institutions1 control

The FSA expects financial institutions to implement a comprehensive cybersecurity risk management framework + aligned with NIST CSF 2.0 + FFIEC IT Examination Handbook + ISO/IEC 27001 ISMS + integrated into Enterprise Risk Management (ERM).

JP-FSA-CYB-Risk-Management-NIST-CSF-FFIEC-Aligned-Identify-Protect-Detect-Respond-Recover-Govern-Plan-Do-Check-Act · Japan FSA Cybersecurity Risk Management Framework + NIST CSF 2.0 Aligned + FFIEC Crosswalk + Identify Protect Detect Respond Recover Govern + ISO 27001 ISMS + Plan-Do-Check-Act + Inherent vs Residual Risk + Risk Appetite + Cyber Risk in ERM →
MITRE ATT&CK1 control

Integrate ATT&CK with broader cybersecurity ecosystem and frameworks. MITRE Engenuity ATT&CK Evaluations - rigorous evaluations of cybersecurity vendor solutions against real adversary tradecraft (APT3 + APT29 + Carbanak/FIN7 + Wizard Spider + Sandworm + Turla...

MITRE-ATTACK-Integration-Engenuity-Evaluations-CALDERA-NIST-CSF-CIS-Lockheed-Kill-Chain-Diamond-Model-STIX-TAXII · MITRE ATT&CK Integration + MITRE Engenuity + ATT&CK Evaluations + CALDERA + NIST CSF + CIS + STIX + TAXII →

Questions people ask about cyber kill chain

What is Cyber Kill Chain?
A model developed by Lockheed Martin that describes the stages of a cyber attack: reconnaissance, weaponisation, delivery, exploitation, installation, command and control, and actions on objectives.
Why is Cyber Kill Chain important for compliance?
Cyber Kill Chain is a key concept in Information Security. Understanding cyber kill chain helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Cyber Kill Chain?
Cyber Kill Chain appears in the requirement text of Japan FSA Cybersecurity Guidelines for Financial Institutions, MITRE ATT&CK. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cyber Kill Chain?
Explore our compliance framework pages to see how cyber kill chain applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cyber Kill Chain applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.