A recent survey of firms that conducted blue team/red team testing offered up some mixed results with about a third saying blue teams rarely catch their attackers, but it also found these exercises lead to more budget being allocated for security.
The survey results indicate that red teams are successful more often than not with 35 percent of those asked stating that their blue teams either rarely or never catch the intruders. Only 2 percent said they were always caught and 68 percent noted occasional success in defending their organization.
However, these tests have resulted in companies reexamining their budget allocations with 56 percent saying some budget increases were made in the wake of such an exercise and an additional 18 percent describing the new investment as significant. In 25 percent of the cases no additional investment was made, and 1 percent of the time security spending actually shrunk.
Another positive take away was the fact that most, 60 percent of the companies asked said they do conduct such tests. The regularity of these tests was a bit spread out with 24 percent saying tests are run monthly, 13 percent annually, 12 percent quarterly and 11 percent bi-annually.
Other results red/blue ..
Support the originator by clicking the read the rest link below.
