Industry frameworks standardize how organizations describe and defend against threats.
MITRE ATT&CK catalogs adversary Tactics, Techniques, and Procedures (TTPs). NIST CSF provides a high-level risk management framework (Identify, Protect, Detect, Respond, Recover). Splunk Enterprise Security maps its detections directly to MITRE ATT&CK.