Red Teaming

Red teaming is a security measure employed by organizations in order to test their defenses. A red team is composed of a group of individuals who attempt to penetrate an organization’s security measures in order to find any vulnerabilities. Red teaming is a process often used in conjunction with penetration testing, which is a process of carrying out simulated attacks in order to assess the security of a system.

The main objective of a traditional penetration testing exercise is to identify vulnerabilities on the target system and provide solutions on how to close the gaps. While this may be enough for an organisation to identify the low-hanging fruit, it does not really portray the real-life attacker’s scenario-based attacks that is happening all around the globe. Red Team Assessment will cover this gap, where multiple scenarios will be undertaken by FIRMUS to closely simulate the way a real-life attacker’s attack on an organization, if they intended to do so.

The methodology for Red Team Assessment is based mainly on of Lockheed Martin’s Cyber Kill Chain. This is one of the most popular red- teaming methodologies being accepted by the industry in an effort to understand how an attacker would plan and execute an attack to harm your organization. The methodology was taken and further simplified by FIRMUS to suit the needs of our client.

The red-teaming approach includes the following eight (8) stages: