Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

WebApp Security, 'My Experience Leading A Purple Team' →

June 26, 2018 by Marc Handelman in Red Team, Blue Team, Purple Team, Penetration Testing, Information Security

A terrific Red & Blue (in reality - Purple's the Word, in this case) Teaming Leadership post (via Robert A., posting on the Web Application Security Consortium List) detailing his experience leading a Purple Team, and the oversight work assocciated with that team color). Very pleased to see this form of shared learning in the Red Team space. Today's Must Read.

"Purple: Purple teaming in my experience is the oversight of how red and blue operate, coordination to strengthen the effectiveness of both red/blue, and improved relationships with impacted stakeholders (dev/it/ops/etc). It likely isn't it's own team, it's the leaders of the blue/red teams coordinating with it's members and cross-org stakeholders to optimize how they operate." via Robert A.'s superlative post further via Web Application Security Consortium List**)

June 26, 2018 /Marc Handelman
Red Team, Blue Team, Purple Team, Penetration Testing, Information Security
  • Newer
  • Older