Cyber threats evolve rapidly, static or slow-moving security frameworks and programs built around higher-level security objectives struggle to remain effective. Attackers move faster than ever, exploiting gaps and weaknesses before organizations can react. The result? Security controls that look good on paper but fail to respond a changing threat landscape. 

At HITRUST, we’ve tackled this challenge head-on with our Cyber Threat Adaptive (CTA) program. This innovative solution stress-tests the HITRUST framework with real-world threat intelligence, ensuring our controls remain highly relevant and effective against emerging risks and support the organization’s ongoing compliance obligations.

Our report details findings covering the period from 01/01/2025 to 6/30/2025. Our research confirms that our i1, e1, and r2 requirement selections are responsive to the current threat landscape. During this period, we analyzed 435 real-world breaches, approximately 220,000 indicators across nearly 4,100 threat articles resulting in approximately 41,000 mappings to MITRE ATT&CK techniques and mitigations. Looking at the most common techniques identified, the HITRUST e1, i1, and r2 assessments have a high degree of coverage against techniques that were most prevalent in the first half of this year.