A purple team testing framework can allow organisations to leverage existing data on threats, attack techniques, defences and assets, and help security teams to understand how cyber criminals work.