APPLICATION OF PURPLE TEAM METHODOLOGY FOR ASSESSING THE CYBER RESILIENCE OF INDUSTRIAL CONTROL SYSTEMS

Abstract

This article examines the application of Purple Team methodology to the assessment and improvement of defensive capabilities in industrial control systems, with particular emphasis on electric power infrastructure. It analyzes collaboration between Red Team and Blue Team specialists, the constraints of controlled cyberattack simulation in operational technology environments, and the importance of combining network, system, and process telemetry. A methodological model is proposed for organizing Purple Team exercises through defensive objective definition, relevant technique selection, evidence collection, result analysis, and repeated validation. Evaluation indicators are introduced for detection, diagnosis, response, and operational safety. The study is analytical and methodological in nature, and the proposed indicators require subsequent experimental validation.