// GLOSSARY

Assumed Breach

A scenario that begins with the assumption that the attacker has already reached the internal network or an identity, and from there validates lateral movement and the impact chain toward the critical target. The third module of the Modular Red Team Simulation (RT-3) works with this logic. The concept represents a mature shift of mindset in security thinking. The traditional approach spent all its energy defending the perimeter, that is, on the attacker never being able to get in; the implicit assumption of this approach was that a breach is a preventable event. Modern threat reality refuted this assumption: a determined enough attacker, against a large enough attack surface, sooner or later finds a way. Assumed breach accepts this reality not as a confession of weakness but as a design principle and changes the question: instead of 'how do I prevent getting in', it asks 'once in, how far can one advance'. This shift carries the test's energy from the initial-access stage, which takes hours of effort, to where the real value is, the spread inside. Initial access is accepted as a hypothesis, and the real matter becomes where microsegmentation, narrowing effective permissions and detection capability stop the attacker.