Measuring and Improving Enterprise Security With MITRE ATT&CK