Author: Jon Baker

Jon is Vice President of Threat‑Informed Defense at AttackIQ, where he leads efforts to help organizations transform security operations through Threat‑Informed Defense and Continuous Threat Exposure Management (CTEM). His work focuses on defining how CTEM is applied in practice and helping security teams adopt disciplined, outcome‑driven approaches that improve security effectiveness at scale.   Previously, Jon was the Director and Co‑Founder of MITRE’s Center for Threat‑Informed Defense, where he built a global community that defined and advanced threat‑informed defense through collaborative R&D. The Center played a foundational role in maturing threat‑informed defense from concept to operational discipline.   Jon once led MITRE’s Cyber Threat Intelligence and Adversary Emulation Department, overseeing MITRE ATT&CK® and CALDERA, and contributed to the development of foundational cybersecurity standards including STIX, TAXII, and OVAL.
    Insights & Perspectives

    What Does MITRE ATT&CK Coverage Really Mean?

    March 10, 2026
    Coverage claims without context are one of the most persistent sources of confusion in security tooling. This post breaks down four myths behind ATT&CK coverage claims and offers a more useful framework for thinking about ATT&CK coverage in practice.
    Read More
    Threat Research

    Finally, CTEM and MITRE INFORM Without the Jargon

    March 3, 2026
    Drowning in security data? This practical guide shows how CTEM and MITRE INFORM cut noise, validate defenses, and prove what matters.
    Read More
    Insights & Perspectives

    From Exposure to Assurance: How CTEM and MITRE INFORM Enable Modern Cyber Defense

    February 24, 2026
    What if you could prove—right now—that your defenses actually work? See how CTEM and MITRE INFORM turn exposure data into real, board-level confidence.
    Read More
    Insights & Perspectives

    INFORM 2026: MITRE’s Updated Threat-Informed Defense Maturity Model Explained

    January 9, 2026
    On January 8th, MITRE’s Center for Threat-Informed Defense (CTID) published a significant update to INFORM, its threat-informed defense maturity model. This update reflects the joint efforts of MITRE researchers, AttackIQ, and several CTID members to enhance INFORM based on two years of operational use and broad security community feedback.
    Read More
    Industry & Community

    Mission. Impact. Opportunity.

    October 14, 2025
    After 23 years at MITRE leading the charge on threat-informed defense, Jon Baker joined AttackIQ to turn innovation into real-world security impact.
    Read More