The “red team” is your attacking team. They are mimicking a potential real-life scenario and using the stealthy techniques a real adversary would use, trying to assess your organisation's cyber resiliency. A red team engagement takes planning and time – exactly as a real hacker would.
The “blue team” is your security team. They are being tested (usually without prior knowledge of the simulated attack), on their capacity to detect and respond to a situation.
In a “purple team” engagements Red Team and Blue Teams collaborate to plan and simulate tactics, techniques and procedures from known threat actors. The aim is to implement or improve your organisation's cybersecurity posture, usually targeting people, processes and technology but not limited to it. Gaps can be identified and closed in real-time.
“Gold team” exercises test your crisis management team – across the organisation, not just IT. It might also involve Legal, PR and other business divisions. It is a tabletop exercise designed to test crisis management policies and procedures and how well the crisis team communicates and executes.
Speak with a Tesserent Adversary Services consultant today to help determine the right service for your organisation.