Red teaming and risk analysis intuitively seem like natural complements, but it’s not always clear how they relate. I’ve attached here a single slide from a capabilities briefing I built for my day job. In it I suggest one way to link the two disciplines explicitly. The gist of the message is that red teaming can enhance each element of the triplet definition of risk.
Next Post: “See It Like Jones Would”