Information Security Assessment Types

Comprehensive taxonomy: vulnerability assessments, penetration tests, red teams, audits, threat modeling

Vulnerability Assessment vs. Penetration Test

Goal-oriented vs. list-oriented security testing methodologies

When to Use Different Assessment Types

Decision framework for assessment type selection

Red, Blue, and Purple Teams

Team structures, operational roles, and interaction patterns

Events, Alerts, and Incidents

SOC terminology and operational classification