Defense in Depth
Use Red Teaming To Build, Not Validate, Your Security Program
Jan 18, 2024
Guest Richard Ford, CTO of Praetorian, challenges the misconception of red teaming as mere validation, emphasizing its value in strengthening organizations. They discuss conducting red teaming early in the project lifecycle, explore different perspectives and value of red teaming, and redefine it as a proactive tool. The chapter also highlights the importance of aligning definitions and repositioning red teams under the SOC for better defense posture.
31:34
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Red teaming should be seen as a proactive testing approach to strengthen defenses, not just a validation exercise.
- There is a need to redefine red teaming and explore its value, considering diverse perspectives and objectives.
Deep dives
Red teaming as a tool to build defenses
Red teaming has the potential to identify areas where organizations need to strengthen their defenses, but it is often viewed as a mere validation of existing security measures. There is a need to shift the perception of red teaming and consider it as a way to proactively test infrastructure instead of waiting for it to be ready. By moving red teaming upstream, organizations can gain more value from these exercises and improve their overall security program.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
