{
  "id": "workflow:red-team-exercise",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-security-research.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Red Team Exercise",
    "workflowKind": "security",
    "triggerType": "scheduled",
    "typicalCadence": "semi-annual",
    "complexity": "cross-team",
    "description": "Conducts an adversarial red team exercise against production systems —\nsimulating real-world attack scenarios, testing detection and response\ncapabilities, evaluating security control effectiveness, and debriefing\nwith blue team for lessons learned. Excludes vulnerability remediation.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:red-team-exercise",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "role:incident-commander",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "role:platform-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "skill-area:incident-response",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "skill-area:k8s-rbac",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "domain:cybersecurity",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "responsibility:respond-incidents",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "responsibility:threat-modeling",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:red-team-exercise",
      "to": "org-unit:incident-response-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}