[Request]: New method card: Red teaming

[elisaachen]

A description of the work

User story

As a tech practitioner, I'd like to see a new method card added on red teaming so that I have new tools/practices that help safeguard new products/services that I build.

Additional information about the request

Red teaming is a method largely used in cybersecurity but can be applied in other contexts. The purpose of this methodology is to have a team identify vulnerabilities and risks in whatever your designing (e.g. product, service, feature) as a risk reduction activity. A "red team" would take on differing bad actor personas to see how they might exploit or misuse the product/service/feature under various scenarios. This methodology was covered in an 18F implicit bias training by David Dylan in 2020.

Background
No response

Open questions
No response

Point of contact
@elisaachen (original author)

Billable?
No

If yes, Tock code:
No response

Point of contact on this issue

Elisa Chen

Reproduction steps (if necessary)

No response

Skills Needed

• Any Human
• Design
• Content
• Engineering
• Acquisition
• Product
• Other

Does this need to happen in the next 2 weeks?

• Yes
• No

How much time do you anticipate this work taking?

2-3 days

Acceptance Criteria

• Draft a method card.
• Determine which Methods section it should live under.
• Get the content and IA reviewed. This could be either reviewed by anyone in 18F who might have context on red teaming (ping @elisaachen or @quarterback if you need a reviewer).
• Publish the new method card.