A recent survey of firms that conducted blue team/red team testing offered up some mixed results with about a third saying blue teams rarely catch their attackers, but it also found these exercises lead to more budget being allocated for security.
The survey results indicate that red teams are successful more often than not with 35 percent of those asked stating that their blue teams either rarely or never catch the intruders. Only 2 percent said they were always caught and 68 percent noted occasional success in defending their organization.
However, these tests have resulted in companies reexamining their budget allocations with 56 percent saying some budget increases were made in the wake of such an exercise and an additional 18 percent describing the new investment as significant. In 25 percent of the cases no additional investment was made, and 1 percent of the time security spending actually shrunk.
Please register to continue.
Already registered? Log in.
Once you register, you'll receive:
The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and practitioner perspectives; strategy and tactics; solutions and innovation; policy and regulation.
Unlimited access to nearly 20 years of SC Media industry analysis and news-you-can-use.
SC Media’s essential morning briefing for cybersecurity professionals.
One-click access to our extensive program of virtual events, with convenient calendar reminders and ability to earn CISSP credits.