Planning and running engagements¶

Different engagements produce different things. A red team assessment finds what a realistic attacker can do. A tabletop finds whether the team can execute under pressure. A threat modelling workshop finds whether the organisation’s model of its own risk landscape is accurate. Choosing the right engagement depends on what conditions already exist and what the organisation can actually act on. Once that choice is made, the planning pages cover the structural work that determines whether the engagement produces findings or change.