Professional Red Teaming: Conducting Successful Cybersecurity Engagements

© Jacob G. Oakley 2019

Jacob G. OakleyProfessional Red Teaminghttps://doi.org/10.1007/978-1-4842-4309-1_10

10. Outcome-oriented Scoping

Jacob G. Oakley¹ 

(1)

Owens Cross Roads, AL, USA

 

Scope identification by the CAPTR team is a multipart process that focuses on identifying those items that pose a lethal or critical impact if compromised. The scope in a CAPTR team assessment allows assessment resources to home in on a limited and prioritized subset of an overall organization. Scoping the assessment this way is necessary if the selected initial assessment assets are to enable the CAPTR team engagement to be successful. The scope of a CAPTR team engagement is more outcome oriented than a traditional red team assessment, because productivity and the ...