{"id":7842,"date":"2020-01-03T00:00:00","date_gmt":"2020-01-03T00:00:00","guid":{"rendered":"https:\/\/www.x4-technology.com\/2020\/01\/03\/red-teaming-is-the-smart-way-to-determine-security-maturity\/"},"modified":"2022-03-22T13:49:59","modified_gmt":"2022-03-22T13:49:59","slug":"red-teaming-is-the-smart-way-to-determine-security-maturity","status":"publish","type":"post","link":"https:\/\/www.x4-technology.com\/de\/red-teaming-is-the-smart-way-to-determine-security-maturity\/","title":{"rendered":"Red teaming is the smart way to determine security maturity"},"content":{"rendered":"

[vc_row full_width=“stretch_row“ el_class=“dark“][vc_column][vc_column_text]Sometimes attack is the best form of defence and that\u2019s the concept behind\u00a0red teaming<\/em>\u00a0in cyber security. Red teaming pits two security teams against each other (an attacker and a defender). The attacker is a team of ethical hackers \u2013 the defender is an organisation\u2019s team of cyber security personnel.<\/p>\n

The point of the exercise is to assess blue team\u2019s response to an attack and identify weak points.\u00a0It\u2019s a way to determine security maturity.<\/em>\u00a0Often, it\u2019s the only way to see what the outcome of a cyber-attack would be in real-world situations. This is achieved by deploying red team without giving blue team any prep. Think unplanned fire drill.[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=“stretch_row“ el_class=“light“][vc_column][vc_column_text]<\/p>\n

The teams<\/strong><\/p>\n

Red team<\/em><\/p>\n

Red team consists of ethical hackers. They\u2019re formed to identify and assess any vulnerabilities in security. Their attack will reveal the security limitations and risks in an organisation, so that the organisation can act on them. The process is repeatable periodically, using different hackers, so that new, alternate options for attack are created and implemented. This keeps the test current and up to date.<\/p>\n

Blue team<\/em><\/p>\n

Blue team consists of an organisation\u2019s cyber security personnel. Depending on the organisation\u2019s structure, these personnel may include a security analyst, security engineer, security architect or security administrator. Some organisations have people in specialised roles, such as security incident responders. Whatever the case, blue team is made up of the people who would likely respond to an attack in real-time.<\/p>\n

How teams are formed<\/strong><\/p>\n

Red team<\/em><\/p>\n

Red team is formed by review. It can be a team within the organisation, but most teaming sees an external force brought in. This brings new ideas into the fray and can expose personnel to hackers of a higher calibre than they\u2019ve experience before. Red team is formed to offer a tough challenge.<\/p>\n

Blue team<\/em><\/p>\n

Blue team is formed by bringing together the least and most experienced cyber security personnel in an organisation. This mix of cyber security boffins creates realistic conditions for the attack. Some logistics may be required to bring everyone together without giving up the game. Reassignment may be needed.[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=“stretch_row“ el_class=“dark“][vc_column][vc_column_text]<\/p>\n

When to deploy a red team<\/strong><\/p>\n

A red team can be set loose in your environment at any time. However, most tests are reactive and will be carried out when:<\/p>\n