SSG coverage claim · MITRE ATLAS-mapped
Browse AI-system risk by MITRE ATLAS
Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.
An adversary may probe or scan the victim system to gather information for targeting. This is distinct from other reconnaissance techniques that do not involve direct interaction with the victim system.
Tactics
Reconnaissance
ATT&CK cross-reference
ATT&CK cross-reference: T1595
ATLAS mitigations & SSG coverage
AML.M0019
Control Access to AI Models and Data in Production
Partial
Fail-closed entitlement gating on production value surfaces
AML.M0032
Segmentation of AI Agent Components
Partial
Rules fence paths and hosts; not process or network isolation
Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org).
Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique.
SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly.
A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.