@minkeymagik @IceSolst I agree, which is why I would write the type of red teaming activity into the System Security Plan. If you could get management

@minkeymagik @IceSolst I agree, which is why I would write the type of red teaming activity into the System Security Plan.

If you could get management to approve the budget as part of the training or security plan.

Could mandate such a scenario, depending on the risk, regulations, and constraints