Which pair of frameworks includes MITRE ATT&CK and ATLAS?

• A. NIST CSF, MITRE ATT&CK
• B. OWASP ASVS
• C. MITRE ATT&CK, ATLAS Frameworks
• D. PCI DSS, HIPAA

Answer: (C)

Understanding how attacker behavior is categorized and how to assess security controls together helps you pick the right framework set. MITRE ATT&CK provides a detailed catalog of attacker tactics, techniques, and procedures that defenders use to model threats, map detections, and guide red-teaming exercises. ATLAS Frameworks offer a structured approach for evaluating and assuring security controls and architectures, often used in governance and assurance activities. When a question asks for a pair that includes both, the option that lists MITRE ATT&CK and ATLAS Frameworks is the best fit because it explicitly contains both components. The other choices mix MITRE ATT&CK with frameworks or standards that don’t include ATLAS, or focus on different domains (like general security controls or compliance) and thus don’t meet the requirement.