Integrate red, blue and purple teams into cyber resilience strategy

"The red team is responsible for simulating or emulating the attackers. Their primary goal is to gain access and achieve a predefined objective."

"The blue team protects the environment. Their primary goal is to protect the network by triaging and responding to security alerts. This team has it tougher, as it's far more difficult to defend than it is to attack."

"The purple team is a bit trickier because it isn't an actual team, per se. It actually evolved from red teaming in an effort to reduce costs and provide greater security value."

"Testing has become more mainstream, scopes have been restricted to such an extent that testing now tends to be focused on a small piece of an environment."

Read at Securitymagazine