Subscribe to The Audit Brief, where we break down the latest episode of The Audit Podcast.
The Real Talk:
- Why traditional red team engagements become obsolete within weeks (and what attackers are doing during those other 364 days)
- The stark difference between military-grade security exercises and private sector “checkbox compliance”
- How a junior sailor found the biggest vulnerability—and why your org needs to break down the walls between technical talent and leadership
A Closer Look:
The Continuous Testing Problem Foster Davis, former Naval cyber warfare officer, joins us with a reality check: If you’re only testing annually, you’re essentially not testing at all. Attackers study your infrastructure 24/7—especially in the public sector where procurement records reveal exactly which outdated tools you’re running.
The Skittles Method Want to know how Foster got senior military leadership to actually act on findings? He ditched data tables for operational risk management charts. Red dots = bad. Get rid of them. Weekly reviews. The result? A 20-something Petty Officer briefing an Admiral on critical vulnerabilities—and earning a medal for it.
Bottom Line:
Never waste a good breach? That’s the wrong mindset. The organizations winning this fight aren’t scrambling after incidents—they’re bringing security conversations to the board level before the crisis. They’re running continuous adversarial testing. They’re letting junior technical talent brief executives directly.
Your attackers aren’t taking 364 days off. Neither should your security testing.
Tune into the full episode to hear Foster’s stories from piracy operations in the Indian Ocean, why “canoe + machine gun + calm water = hack” applies to your cybersecurity posture, and what happens when you couple red teaming with risk management principles that executives actually understand.
🔗 Ep 76 – Red Team Reality Check with Foster Davis
Listen wherever you get your podcasts – Subscribe to our YouTube channel to stay up to date on breaking cybersecurity news.
Learn more at www.itauditlabs.com
