Red teaming · Medical devices
Red teaming elevates security in embecta's complex IT environment
embecta, a global provider of diabetes care products, had recently spun off from a larger parent company. Armada ran a full red team engagement to test its defenses the way a real adversary would, across network, people and physical security.
The challenge
- Overlapping legacy systems and infrastructure inherited from the former parent, with limited control over them during the transition.
- A large international footprint that depends on many third-party vendors, each with its own security practices.
What we did
- Threat actor emulation against real-world attack paths.
- Phishing and social engineering, including tests of service desk processes.
- Physical security testing of locks, access controls and surveillance.
- A test of how quickly the team detected and responded.
What we found
- An ISP router in Asia-Pacific left unsecured while providing a site's internet access.
- A remote desktop exposed by a service supplier. The vendor fixed it at embecta's request.
- Service desk and physical security gaps, each with specific recommendations.
The outcome
- Stronger asset management practices.
- Enhanced employee security training.
- Updated IT and security policies across network management and physical security.
Armada is a CREST accredited provider.
