How do you use the MITRE ATT&CK framework for improving enterprise security?

You can simulate different types of access/attacks using the matrix suggested by MITRE: https://attack.mitre.org/matri...

For example, you can transport one internal/specific problem/vulnerability of your environment to matrix and check/validate, possibilities and threats, based on your topologies and tools, maybe be a future real threat. 

It's can help you to "prioritize and categorize" your issues.