Aligning MITRE ATT&CK to NIST 800-53 

The test scenarios presented can be seen as exploits some with payloads that can easily infect production systems with malware, perform unauthorized changes, and compromise settings. Are you taking these risks into account?

37:56, which version of the ATT&CK is that? I downloaded the most recent mappings (ATT&CK v8.2) template and it does not have a column for Continuous Monitoring. Thank you.