An adversary-emulation engagement
I helped a friend's organisation with a small adversary-emulation engagement this month. The findings were predictable; the process was instructive about where the gap between paper-defence and operational-defence lives.