Blue team (computer security)

A blue team is a group of individuals who perform an analysis of information systems to ensure security, identify security flaws, verify the effectiveness of each security measure, and make certain all security measures will continue to be effective after implementation. The United States National Institute of Standards and Technology glossary defines a blue team as "the group responsible for defending an enterprise's use of information systems by maintaining its security posture against a group of mock attackers".

Some blue team objectives include:

  • Using risk intelligence and digital footprint analysis to find and fix vulnerabilities and prevent possible security incidents.
  • Conduct regular security audits such as incident response and recovery.
This page is issued from Wikipedia. The text is available under Creative Commons Attribution-Share Alike 4.0 unless otherwise noted. Additional terms may apply for the media files.