This talk will be an overview of what red teaming actually is; where it came from, why the majority of people using the term are doing it wrong, how to decide where and when to use it, and where to go to learn how to do it right. In addition I'm hoping to be able to share our lessons learned in implementing it for a Fortune 50 company but I'm going to have to talk to some lawyers about that before I make any promises. Toby has been working in information security since 1999. During that time he's done every aspect of defensive information security and in some cases published books on the topics. In 2015 he was tasked with standing up a Red Team and since then has been focused on red teaming philosophy and methodology (in between actual engagements)