methodatlas
Decision Making

Red Teaming

Turns options, criteria, and risks into a tangible result by defining scope, clarifying the Red Team role, and deriving mitigations.

Core question
Which attack vectors, weaknesses or entry paths overcome the artifact, and which of these vectors are likely enough to justify mitigation?
HighWorkshop1-4 h
Open runsheetPlan sessionStart comparison
Purpose

The method helps clarify options, criteria, and risks concretely. It separates options, evaluation criteria, and open risks. The result is captured as challenge findings, risk register, and mitigation plan.

How it works

The team follows the steps: define scope, clarify the Red Team role, collect attack points, prioritize findings, and derive mitigations. Each step is captured visibly. At the end, challenge findings, risk register, and mitigation plan are available so decisions, tests, or actions can follow directly.

Visual orientation

Method sketch for a quick mental model.

Red Teaming · Adversarial PerspectiveDeliberately attack plan, assumptions, and weaknesses, prioritize findings, and derive countermeasures
Red TeamingThe visual shows plan, red team, findings, defense, and plan-B measures as a structured challenge.Attack a plan deliberately before reality doesRed Teaming separates attack, finding, and response so critique turns into better preparation.challengefindingsconfrontprotectPlan / assumptionlaunch without migration freezeRed Teamattacks logic, data, risksDefenseevidence, trade-offs, limitsPlan Bcountermeasures, triggers, ownersFinding Adependency unclearFinding Brollback missing

Flow

  1. 1Define scope
  2. 2Clarify the Red Team role
  3. 3Collect attack points
  4. 4Prioritize findings
  5. 5Derive mitigations

The runsheet guides execution with 5 phases, timeboxes, 5 pitfalls, and clear stop criteria.

Open runsheet

Ideal for

  • High-stakes decisions
  • Security thinking
  • Strategy review

Not good for

  • Early creative ideation
  • Teams without psychological safety

Deep dive

In detail

Red Teaming follows a clear working logic: define scope, clarify the Red Team role, collect attack points, prioritize findings, and derive mitigations. This turns the method into a visible thinking process instead of only a discussion. Participants move step by step from raw material, observations, or options toward a shared structure. As a result, challenge findings, risk register, and mitigation plan become useful for decisions, learning, and planning.

Facilitation

Prepare a clear guiding question, the right information, and a visible workspace. Plan for 1-4 h with 3-8 people and use the format in a facilitated workshop. The facilitation is demanding and should be prepared carefully; short timeboxes, visible intermediate results, and a parking lot for open questions are helpful.

Output artifacts
Challenge FindingsRisk RegisterMitigation Plan
Tags
riskdecisionchallengesecurity

Sources

Red team - Wikipediaen.wikipedia.org
Artifact templates
Red Teaming Working TemplateCompact working template for Red Teaming with challenge scope, attack points, findings, and mitigations.
markdown

red-teaming-working-template.md

Compact working template for Red Teaming with challenge scope, attack points, findings, and mitigations.

Red Teaming Working Template

Goal

Challenge assumptions, expose weak spots, and strengthen the plan, strategy, or design.

Context

When and for what do we use this method?

Input

Which data, observations, decisions, or materials are available?

Working area

  • Scope:
  • Attack points:
  • Weak assumptions:
  • Findings:
  • Mitigations:

Output artifacts

  • Challenge notes:
  • Risk register:
  • Mitigation plan:

Open questions

  • ...

Next step

Owner, date, and success signal.

When to choose differently

Short decision aid for existing alternatives.

Pre-Mortem

Statt Red Teaming, wenn ihr Risiken vorab durchspielen wollt, bevor sie im Projekt wirklich teuer werden.

Similar methods

All methods
Decision Making
Risk Matrix

Moves options, criteria, and risks toward a concrete result through "set the scales for likelihood and impact", "collect risks or carry them over from earlier identification", and "define actions for each high-risk item".

Decision Making
Decision Tree

Turns options, criteria, and risks into a tangible result by defining the decision question, collecting options and conditions, and discussing the best path.

Decision Making
Assumption Surfacing

Clarifies options, criteria, and risks by framing the initiative or decision, collecting implicit assumptions, and planning tests or research.

Decision Making
Pre-Mortem

Turns options, criteria, and risks into a tangible result through defining the initiative, assuming failure, and assigning mitigations.

Statt Red Teaming, wenn ihr Risiken vorab durchspielen wollt, bevor sie im Projekt wirklich teuer werden.

Decision Making
Delphi Method

Turns options, criteria, and risks into a tangible result by defining the question and panel, querying in the first round, and deriving the outcome in the next round.

Decision Making
Argument Mapping

Clarifies options, criteria, and risks by framing the central question, recording the main claim, and marking weak spots.