Follow these tips for running red-team exercises that will deliver added insight into your operations.

Steve Zurier, Contributing Writer, Dark Reading

June 12, 2020

8 Slides

With the threat landscape as dangerous as it is today, all organizations need deeper insights into their networks. That's where red-team exercises can help.

Despite the expense, the vast majority of companies will engage with third parties to conduct them. But building an in-house team is also an option. Either way, everyone should understand some red-team basics.

"Start by trusting your gut and don't overthink complex problems," says Daniel Wood, associate vice president of consulting at Bishop Fox, who recently posted a blog based on his experience managing red teams. "If you start to think something might be amiss or just plain wrong for the environment you're in, chances are it is. And if you are too reactive to what's around, you will be one step behind. A primary goal of a red team is to dictate and develop the situation, not to let others do it for you."

What should happen after that gut check? This list of seven tips will help you get the most from a red-team exercise.

About the Author(s)

Steve Zurier

Contributing Writer, Dark Reading

Steve Zurier has more than 30 years of journalism and publishing experience and has covered networking, security, and IT as a writer and editor since 1992. Steve is based in Columbia, Md.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights