Crossover Sec: Breaking Down the Silos

This article introduces the concept of 'InfoSec Crossover,' advocating for a blended approach that aligns technical security activities (pen testing, red teams, SOC work) with advisory risk frameworks to produce more accurate, business-focused risk assessments; it recommends using technical engagement outputs—such as attack complexity and simulated adversary techniques—to improve likelihood and impact modeling and better inform business investment decisions.