How does an organization know that its cyber security controls are effective? In this executive briefing, Penetration Testing with Red, Blue, and Purple Teams: Executive Briefing, you will learn foundational knowledge about active assurance. First, you will learn about penetration testing. Next, you will discover bug bounties. Finally, you will explore how to make sure the organization really learns from a red team exercise and what you can do to make sure that a red teams doesn’t demotivate your internal (blue) team. When you are finished with this executive briefing, you will have the knowledge of active assurance needed to work with technologists, defenders, and assurance professionals.
Author Name: John Elliott
Author Description:
John Elliott is a specialist in regulated security and data protection. His fascination is the way that people engage with security directives: whether that’s a company following external regulation, an information security team developing policies, an IT team following them, or a colleague who is just trying to do their job securely. John has led information security and data protection functions in aviation and financial services. He’s represented both Visa Europe and Mastercard on the PCI S… more

Table of Contents

• Why Active Assurance?
  6mins
• Penetration Testing
  4mins
• Bug Bounties
  2mins
• Red, Blue, and Purple Teams
  3mins
• Critical Success Factors
  2mins