Intelligent CIO Middle East Issue 71 | Page 25

TRENDING

VULNERABILITY ASSESSMENT , PENETRATION TESTING OR RED TEAMING : WHICH IS RIGHT FOR YOUR ENTERPRISE ?

Red teaming is a service focused on the assessment of a company ’ s operational security capabilities via conducting a sophisticated attack simulation exercise and evaluating detection and response reaction of defending SOC specialists ( blue team ). Alexander Zaytsev , Head , Security Assessment , Kaspersky , explains the difference between red teaming and other services including vulnerability assessment and penetration testing .

More than a third of enterprises experienced a targeted cyberattack in 2020 . So , you might say that it ’ s important for companies to understand how their security operations would hold up if they are faced with similar sophisticated threats . Arguably one of the best ways to achieve this understanding is to look at your own organisation from a threat actor ’ s standpoint . Unfortunately , there ’ s a plethora of security assessment service offerings out there , masquerading behind misleading marketing materials .

What are security assessment services all about ?
From our experience , customers often get confused between three types of services – vulnerability assessment , penetration testing and red teaming .
From our experience , customers often get confused between three types of services – vulnerability assessment , penetration testing and red teaming .
Unfortunately , in the field of information security , a lot of shiny , new terms eventually get promoted aboard a hype-train for a never-ending ride of supplycreating demand . This was true when penetration testing first became a thing and the same is true today for red teaming .
www . intelligentcio . com INTELLIGENTCIO MIDDLE EAST 25