You're listening to the CyberWire Network, powered by N2K. Hey everyone.

Welcome to CyberWireX, a series of specials where we highlight important security topics

affecting security professionals worldwide.

I'm Rick Howard, the chief security officer, chief analyst, and senior fellow at the

CyberWire,

and today's episode is titled,

The Future of Security Validation.

What's next?

It's clear that security executives need visibility

into their actual cyber risk in real time.

But with the flood of security alerts, it's tough for organizations to pinpoint impactful

security gaps.

To meet this challenge, security teams are shifting to an exploit-centric approach to security

validation. In other words they are looking towards adversary group

emulation the process of imitating the tactics, techniques, and procedures of a specific

adversary in order to assess and improve how resilient an organization is against

known adversary attack sequences, in other words, red teaming.

In this episode, I've invited two subject matter experts to the cyberwire hash table

to discuss the current state of red teaming, blue teaming, purple teaming, and penetration testing.

A program note, each CyberWireX special features two segments.

In the first part, we'll hear from an industry expert on the topic at hand,

and in the second part, we'll hear from our show's sponsor for their point of view.

...