Cybersecurity Blue Team Strategies

12

Expert Insights

Anthony Desvernois

As an IT security manager, I led security departments in financial institutions in Europe, the Asia-Pacific region, and the Americas. I managed business security teams and operational security teams, covered business and IT continuity topics, and participated as a blue team member in multiple engagements (including purple team exercises).

The blue team is an important part of your cybersecurity team. It is in charge of detection and often the incident response too. They need to maintain constant vigilance in order to be able to anticipate and discover attacks on your information system.

The biggest challenge is to hire good people for your team. As Aristotle said, “The whole is greater than the sum of its ...