SSG coverage claim · MITRE ATLAS-mapped

Browse AI-system risk by MITRE ATLAS

Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.

AML.T0016.002 Partial Sub-technique of AML.T0016

Generative AI

Adversaries may search for and obtain generative AI models or tools, such as large language models (LLMs), to assist them in various steps of their operation.

Tactics
Resource Development
ATT&CK cross-reference
No Enterprise ATT&CK cross-reference.
ATLAS mitigations & SSG coverage
AML.M0001 Limit Model Artifact Release Not addressed Organizational release policy
AML.M0020 Generative AI Guardrails Partial Guards the agent's actions at the tool boundary, not the model's token output
AML.M0022 Generative AI Model Alignment Not addressed Model alignment training
Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org). Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique. SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly. A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.