MITRE Corporation, “Making Security Measurable” [portal page], This portal provides a “collection of
information security community standardization activities and initiatives” provides a portal to all the
different MITRE security that are guided by the informal mission statement on the portal page: “MITRE’s
approach to improving the measurability of security is through enumerating baseline security data,