The goal is to train and measure the people, processes and technologies used to defend the environment. A special focus is always placed on the realism and the knowledge to be gained from red teaming. The operations are planned and executed individually accordingly. Red Teaming is measured by the factors of training and location determination for the Blue Team.
Processing and sharing insights with the Blue Team after the operation is a key component of Red Teaming. If the following questions are still open in your company, a Red Teaming is recommended:. The purpose of the scoping meeting is to define the goals of the red teaming and to transfer sufficient knowledge about the environment to be tested so that the offer can then be created on this basis. The questions mostly revolve around the simulated threat and any limits and constraints. The offer is prepared on the basis of the scoping meeting.
In addition to the objectives, methods, price and general conditions, it also contains a suggested timeframe for execution. Of course, nothing is set in stone and the offer will be adapted to your needs. In principle, we always charge according to the actual effort involved.
In the kick-off, the test details are discussed with the responsible persons. In particular, the definition of the exact objectives in the scope and the provision of any accounts for an Assumed Breach approach are discussed. Fast and smooth communication during the test is also ensured in this meeting. This is done after consultation with the contact person and taking into account the capabilities of the Blue Team.
Now the planned operations are carried out and all steps are documented. A contact person White Cell is defined for the implementation period who is available for queries from the Red Team.
