Professional Red Teaming: Conducting Successful Cybersecurity Engagements

© Jacob G. Oakley 2019

Jacob G. OakleyProfessional Red Teaminghttps://doi.org/10.1007/978-1-4842-4309-1_7

7. Reporting

Jacob G. Oakley¹ 

(1)

Owens Cross Roads, AL, USA

 

The more appropriate title for this chapter may as well have been “Communicating.” Excellent hacking skills and exceptional tradecraft aside, none of that matters if the results of the assessment cannot be communicated to the customer in a way that facilitates improvement of organizational security posture. Even in instances when the red team is giving a report to a technical audience, those individuals are almost assuredly not offensive security minded and will view findings in a different light than the red team members. In addition, most situations involve the report making its way ...