adammontville
commented
5 years ago Inputs:
- PTP: Enterprise penetration test policy
Operations:
- Examine the enterprise penetration test policy for the following properties:
- Red team exercises are specified to occur periodically
- Note the periodicity of expected red team exercises
- Interview security operations personnel to determine the last time a red team exercise was performed
Measures:
- M1 = Boolean - enterprise policy contains periodicity for red team exercises (1) or not (0)
- M2 = Time of last red team exercise
- M3 = Current time
- M3 = Current time - maximum period between red team exercises
- M4 = Boolean - time of last red team exercise is greater than or equal to M3
Metrics:
- [0,1] = Boolean - enterprise policy requires red team exercises periodically.
- [0,1] = Boolean - the last red team exercise was performed within the appropriate time period
Perform periodic Red Team exercises to test organizational readiness to identify and stop attacks or to respond quickly and effectively.
Measures
Metrics