---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Activate the MITRE ATLAS framework

# Activate the MITRE ATLAS framework {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Activate the MITRE ATLAS profile to ingest MITRE ATLAS data for threat detection in AI and machine learning systems.

## Before you begin

Role required: sn_ti.admin

## About this task

STIX™ (Structured Threat Information Expression) is a language for describing cyberthreat information in a standardized and structured manner. Using STIX data and Trusted Automated Exchange of Indicator Information (TAXII™) profiles, security teams can share cyberthreat information. This helps isolate threats already identified by your company or by other sources.

## Procedure

1. Navigate to AllThreat IntelligenceSourcesTAXII Profiles.  
   You see the available TAXII profiles.
2. Select the MITRE ATLAS profile.  
   The MITRE ATLAS profile provides only one TAXII collection, ATLAS.

   The ATLAS collection describes adversarial tactics and techniques used against AI and machine learning systems.
3. In the TAXII Collections related list, select ATLAS to open the collection record.  
4. Select the Active check box to activate the collection.  
   The Active check box controls whether the collection imports and refreshes data on a scheduled basis.
   * On: The collection imports and refreshes MITRE data on a scheduled basis.
   * Off: Data is refreshed only when an import is manually triggered.

   Note:  
   The MITRE ATLAS collection is configured to operate in on-demand mode by default, with automatic refresh turned off. Enabling the MITRE ATLAS collection makes the ATLAS heatmap available.
5. In the Schedule tab, review the Run field.  
   The Run field provides no scheduling choice for the ATLAS collection. On Demand is the only mode.

   To refresh the data, select Execute Now.

## What to do next

After the TAXII profile setup is complete, the MITRE ATLAS repository data is imported to the ServiceNow AI Platform®. You can see this data by navigating to MITRE ATLAS RepositoryMatrices and MITRE ATLAS RepositoryTechniques.

*[\>]: and then