---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Manage MITRE Relationships

# Manage MITRE Relationships {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Manage the MITRE relationships information that you imported from the MITRE TAXII collections.

## Before you begin

Role required: sn_sec_tisc.analyst

## About this task

MITRE tactics are broad goals, and techniques are the methods used to achieve them. A technique can be linked to more than one tactic. MITRE maintains these tactic-technique mappings and updates them with each release.

When you add a MITRE technique to a case, these mappings determine which tactics are available to select. If MITRE no longer maps a technique to a tactic, that combination won't be available. For details about mappings that
MITRE has removed, see [Review revoked MITRE tactic and technique associations](https://www.servicenow.com/docs/oLwx0jf_VbPacB0cjk_RSw "Review the tactic and technique pairs that MITRE no longer maps, then delete or remap the entity and case associations that were created from them.").

## Procedure

1. To view the MITRE ATT\&CK Repository data, navigate to WorkspacesThreat Intelligence Security CenterThreat Intel LibraryMITRE ATT\&CKRelationships.  
   You can view the listed relationships.
2. Select any source object to view all the associated information.
3. Select New to manually create the MITRE ATT\&CK relationships.
4. Fill in the fields appropriately.  
   {#tisc-mitre-manage-relationships__table_xpf_yd5_g1c__entry__2}

   | Field | Description |
   |-|-|
   | Source MITRE Object | Add the source MITRE object. |
   | Target MITRE Object | Add the target MITRE object. |
   | Source MITRE Type | Enter the source MITRE type. |
   | Target MITRE Type | Enter the target MITRE type. |
   | Relationship Type | Specifies the direction of the relationship between the observable and the object. The available options are: * Inverse - The relationship is defined from the observable to the object. * Direct - The relationship is defined from the object to the observable. {#tisc-mitre-manage-relationships__define-observable-observable_ul_oxw_ngj_nzb} |
   | Source | Select and define the source object. |
   | Relationship ID | Define the relationship ID. |
   [Table 1. Create MITRE relationships - Details]

   {#tisc-mitre-manage-relationships__table_xpf_yd5_g1c}
5. Select Save.
6. To view how these objects are related, select Relationships.
{#tisc-mitre-manage-relationships__steps_tlh_wc5_g1c}

*[\>]: and then


