Looking to start Purple Teaming for my family Business -- how do I start with near zero experience?

---

As the lengthy title states, our family business does online marketing, website creation, etc, and was looking for someone to help start purple teaming for the company to better protect our clients.

I volunteered (since I've always been interested), but don't quite know where, or how to start.

Any advice would be greatly appreciated.

Hi James,

What do you mean by Purple Teaming ?

If I understand you correctly, you are looking for an IT Security professional to assess the security posture of your family business.
Is that correct ?
If the answer is yes, then you might be looking for a professional and certified Pen Tester ( white hat hacker ).

@Abraham-Oz said in Looking to start Purple Teaming for my family Business -- how do I start with near zero experience?:

If I understand you correctly, you are looking for an IT Security professional to assess the security posture of your family business.

Thank you for the reply!

So, a mix of red team and blue team (purple) is what I'm looking to start learning.

I was just wondering what would be a good place to start that would help cover offensive and defensive security. Not trying to master it, but we can't really afford a pentester, and I would like to help fill that gap as best I can, and just want to know where to start.

Greetings @Abraham-Oz

If you've already got some understanding with the technologies in your business environment (ie you're the day-to-day systems/network/security/cloud/web administrator) and you just need to be able to up your defensive/offensive security skills to begin to be an effective Purple Team for your org, then I would suggest a CySA+/Pentest+ double-whammy.

These certification courses cover many of the concepts and tools you'll need to know about to get that Purple Team party started.

I hope that helps!

Daniel

Hi James,

Now I understand you better. First, I haven't heard of the term purple team.

There is Red Team -- Offensive Security, and Blue Team -- Defensive Security.
It all comes down to what is your knowledge level in networking CCNA R&S style, basic computer OS knowledge, and it wouldn't hurt programming knowledge skills as well -- Python, Bash.

If you don't have any networking knowledge, I would recommend either studying Cisco CCNA R&S or the CompTIA Network+
For the Info Sec realm, I would recommend the new release course here on ITPro.TV called Cisco CyberOps Associate (200-201)
very good course for beginners, I love this course.

I also recommend, the CompTIA Security+ the new version. CompTIA CySa+ this will give you more than enough knowledge on the Blue Team side.
For the Red Team side, you can study for the CompTIA Pentest+, CEH V11 (is releasing soon here) and if you really want to master your PT skills, and you definitely should, go for the Offensive Security OSCP course, that is a pure practical hands on exam. You must know Linux and Python for the OSCP exam.

It looks like overwhelming and very intimidating to tackle all of this at once, but this is the only path to truly master your skills you will need in the real world...

Good luck in your studies, and take it easy one course at a bite and very soon you'll be a master on the keyboard :))

Regards,
Abraham

You guys have both been beyond helpful. Thank you!

This will really help.