In recent years, “Red Team Assessment” has been adopted across different industries as a method of assessing an organization’s ability to handle hackers’ attacks in their production environment. But it is hard to know how to prepare for the assessment and what kind of mindset to have before implement the assessment. The service providers are always eloquent about their red team assessment. But is it really that safe as they say? Would there be any accident happens during the assessment? We invite personnel who works in finance industry and conducted the red team assessment to share his experience.