A Comprehensive Review of DISARM Framework and its Compatibility with Related Frameworks

The DISARM Framework has become one of the primary tools for classifying and communicating the tactics, techniques, and procedures (TTPs) used in foreign information manipulation and interference. This report, produced under the EU-funded ADAC.io project, undertakes a systematic review of the framework’s effectiveness and its compatibility with adjacent analytical standards, notably ABCDE and STIX. The authors draw on structured user feedback to assess where DISARM’s design serves analysts well and where mismatches between technical sophistication and operational accessibility create friction.

The central finding is encouraging but conditional: DISARM has genuine potential as a field-wide standard, but that potential is contingent on modular development that responds to practitioner feedback rather than centralised expansion. The compatibility analysis with STIX is particularly useful for teams that need to integrate FIMI incident data into broader threat intelligence pipelines — an increasingly common requirement as governments develop national-level FIMI monitoring architectures. For analysts and policymakers working on counter-FIMI tooling or procurement, this report is a practical checkpoint on where the framework currently stands.