A red team can go beyond a penetration test to identify potentially damaging ‘cracks’ that could be exploited. Advanced attacks are likely to be a blend of cyber, physical and social engineering attacks. Determining the potential damage for these should they succeed, can identify the remediation required, as well as provide further measurement on the effectiveness of your security investments.