Monetary Authority of Singapore Technology Risk Management Guidelines 13.4: 13.4 Adversarial Attack Simulation Exercise

The FI should perform adversarial attack simulation (red team) exercises that emulate real attackers' tactics, techniques and procedures against the people, processes and technology behind critical business functions, to test its cyber defence and response plan; objectives, scope and rules of engagement should be defined beforehand and the exercise run in a controlled, closely supervised way so production is not disrupted.