Blue team: Difference between revisions
imported>Unknown user No edit summary |
imported>Unknown user No edit summary |
(No difference)
| |
Latest revision as of 00:24, 20 January 2026
Blue team
The group responsible for defending an enterprise's use of information systems by maintaining its security posture against a group of mock attackers (i.e., the Red Team). Typically the Blue Team and its supporters must defend against real or simulated attacks 1) over a significant period of time, 2) in a representative operational context (e.g., as part of an operational exercise), and 3) according to rules established and monitored with the help of a neutral group refereeing the simulation or exercise (i.e., the White Team).
Source: CNSSI 4009-2015 | Category: