September 28, 2015
Zenko, a security expert and fellow at the Council on Foreign Relations, explains, in absorbing detail, the value of red teams, groups formed to act as devil’s advocates. While red teams are frequently used by the U.S. military, they are relatively new to the corporate world. Zenko shows just how these practices can help companies improve performance and identify failings. He advocates three specific techniques: simulations, vulnerability probes, and alternative analyses. He goes on to identify six red-teaming best practices (such as “have a big bag of tricks” and “be willing to hear bad news and act on it”). Zenko provides interesting examples of how U.S. intelligence agencies have used red-teaming, notably for topics related to homeland security. Shifting focus from the government and the military, Zenko looks at predatory competitive practices in a chapter that will hit home with every executive. From business war gaming to physical and cyber penetration testing, he shows just how vulnerable corporations are. He closes with a look at realistic outcomes and pitfalls to avoid. Armed with case studies ranging from the discovery of vulnerabilities in the Verizon network to the hunt for Osama bin Laden, Zenko offers readers much to consider and an effective way to take action. Agent: Geri Thoma, Writers House.
October 15, 2015
Foreign-relations expert Zenko explains red teams for government, military, and business leaders, stating, An astonishing number of senior leaders are systemically incapable of identifying their organization's most glaring and dangerous shortcomings. Evaluating one's own judgments and actions under uncertain conditions is inherently difficult, and the institution's culture leads employees to adopt preferences of their bosses and workplace. Red teaming is a structured process that seeks to better understand the interests, intentions, and capabilities of an institutionor a potential competitor with methods including Vulnerability Probes and Simulations. Vulnerability Probes can use red teams as surrogate adversaries, testing the reliability of a targeted institution's defense systems to identify weaknesses. In Simulations, red teams can serve as consultants to institutions developing, testing, and refining their strategies by modeling how they could work in unforeseen situationse.g., the 2011 U.S. Navy SEAL mission that killed Osama bin Laden was perfect because the crash of one of the two transport helicopters was a contingency for which they planned and trained. Excellent book.(Reprinted with permission of Booklist, copyright 2015, American Library Association.)