Design of a Purple Team for the Colombian Financial Sector Focused on Stock Brokerage Companies (SBK)

Abstract

Private and public sector companies are suffering cyber attacks globally, so the need to invest in cybersecurity has become a priority. In this sense, several supervisors have formulated regulations around cybersecurity, with a particular emphasis on banks and their challenges but not much on the Stockbrokers (SBK) entities that are the subject of this research work. Although one of the most common methodologies is the simulation of offensive (red team) and defensive (blue team) security, purple teams are emerging as an alternative that enables a broader spectrum of learning and analysis for companies, particularly SBKs This article details a methodological guide for the design and implementation of a purple team in SBKs in order to strengthen cybersecurity governance in the face of contemporary cyber threats.