Skip to content

Red Teaming Insights and Examples from Beyond

Micah Zenko

Red team approaches beyond penetration testing—how military, intelligence, and private sector organizations use red teaming for strategic defense.

Summary

In this talk at the DEF CON 27 Social Engineering Village, foreign policy expert and author Micah Zenko ("Red Team: How to Succeed by Thinking Like the Enemy") discusses applying red teaming methodologies beyond information technology into institutional and strategic decision-making. He opens at 05:00 by analyzing the severe impact of cognitive biases on high-stakes executive decisions, demonstrating how confirmation bias and groupthink routinely lead leadership to catastrophic policy failures.

Micah explains at 10:00 why conventional organizations struggle to capture contrarian insights, noting that institutional hierarchies naturally incentivize conformity and suppress dissenting viewpoints. To counter this, he outlines structured methodologies for designing red team exercises, tabletop simulations, and alternative analysis games at 15:00, emphasizing that simulations must test actual operational procedures under realistic failure conditions.

At 20:00, Micah issues a strong warning regarding executive buy-in: commissioning a red team only to ignore or dismiss its uncomfortable conclusions is more damaging than conducting no assessment at all, as it signals that candor is penalized. He wraps up at 25:00 by examining flawed social science around brainstorming and advocating for rigorous, independent red teams empowered to challenge fundamental institutional assumptions. (AI summary — Gemini Flash)

Related talks