Skip to main content

Team pathways

Nine team views. One mission-readiness model.

Team colours provide intuitive pathways. Underneath, CLIP uses configurable role profiles with formal competencies, permissions, responsibilities, Rules of Engagement and assessment criteria.

CLIP · Role profile model

Illustrative view
  1. 01 · LabelBlue TeamPresentation only
  2. 02 · Role profilesoc-analyst-l2 · v3.2Versioned and approved
  3. 03 · CompetenciesTelemetry · Triage · ResponseFramework mapped
  4. 04 · PermissionsScoped by exercise authorizationNever by colour
  5. 05 · EvidenceObserved actions and artifactsAssessor adjudicated

Team-colour terminology varies by organization

CLIP maps each label to an approved, versioned role profile with explicit responsibilities, permissions, Rules of Engagement and assessment criteria. The colour itself never establishes authorization.

All pathways

Choose a pathway to explore.

Each pathway defines mission intent, competencies, scenarios, evidence, collaboration and governance.

The underlying model

From label to enforceable role profile.

The colour is the entry point. Everything that governs access, responsibility and assessment lives in the versioned role profile beneath it.

  1. 01LabelRed, Blue, Purple and so on — presentation only.
  2. 02Role profileVersioned, approved, organization-specific.
  3. 03CompetencyTasks, knowledge, skills and proficiency.
  4. 04PermissionsScoped by exercise authorization, never by colour.
  5. 05EvidenceObserved actions supporting a readiness claim.

In sequence: A team label maps to a versioned role profile, which defines competencies, which determine permissions within an exercise authorization context, which in turn shape the evidence a learner produces.

Collaboration

How the teams work as one system.

A mission sits at the centre. These are the relationships that carry work between roles.

  • Red → Bluethrough Purple validationEmulated techniques become validated detections and closed gaps.
  • Yellow → Red/Bluethrough Orange remediationEngineering changes are verified against adversary behaviour.
  • Whitegoverns exercise executionScope, Rules of Engagement, injects, safety and adjudication.
  • Goldgoverns strategic decisionsPriorities, escalation, resources and risk acceptance.
  • Graysupports and observesNeutral support, evidence review or independent assessment.
  • Greenfeeds every pathwayProgressive readiness into each specialised role.

Scenario example

Nine roles, one exercise.

A single scenario exercises the whole system rather than one role in isolation.

  1. 01Red, Blue and Purple execute the technical exercise and validate detections.
  2. 02White controls execution, releases injects and adjudicates outcomes.
  3. 03Gold makes time-bounded decisions with incomplete information.
  4. 04Yellow and Orange take findings into remediation and secure redesign.
  5. 05Green participates at a supervised level and progresses.
  6. 06Gray supports the range or independently reviews the evidence.

Your definitions

Configure your own taxonomy.

There is no universal international definition for every team colour. Each installation approves its own semantics — especially for Green, Yellow, Orange, Gray and Gold.

Rename a teamMerge two rolesAdd a roleChange permissionsSet assessment criteria

CLIP stores each definition as a versioned role profile, so a change is auditable and prior exercise evidence remains valid against the version it was assessed under.

Map your roles to CLIP.

We start from your approved role definitions and competency framework, not from a fixed taxonomy.

Teams | CLIP