informa
Slideshow

7 Must-Haves for a Rockin' Red Team

Follow these tips for running red-team exercises that will deliver added insight into your operations.
A Clear Objective
An Understanding of the Costs
A Red Team Leader Who Lets the Team Do Its Job
People Who Can Adapt as Situations Change
The Ability to Use Open Source Tools
Avoid 'Rabbit Holes' at All Costs
An Open Mind on Different Perspectives About How to Stop an Attack
1/7

With the threat landscape as dangerous as it is today, all organizations need deeper insights into their networks. That's where red-team exercises can help.

Despite the expense, the vast majority of companies will engage with third parties to conduct them. But building an in-house team is also an option. Either way, everyone should understand some red-team basics.

"Start by trusting your gut and don't overthink complex problems," says Daniel Wood, associate vice president of consulting at Bishop Fox, who recently posted a blog based on his experience managing red teams. "If you start to think something might be amiss or just plain wrong for the environment you're in, chances are it is. And if you are too reactive to what's around, you will be one step behind. A primary goal of a red team is to dictate and develop the situation, not to let others do it for you."

What should happen after that gut check? This list of seven tips will help you get the most from a red-team exercise.

 
Next slide
Recommended Reading: