MEASURING THE SUCCESS OF YOUR ADVERSARY SIMULATIONS

Summary from the TLDR InfoSec newsletter

This post outlines how to measure the success of Adversary Simulation or Red Teaming exercises, focusing on three key goals: test controls, defensive enlightenment, and professional courtesy. Test Controls involves collaboration where testers validate expected security measures and share findings with defenders to enhance understanding and improve defenses. Testers should maintain professional courtesy throughout this process by being available, cleaning up data and tools, and acting transparently and humbly.