The RSI Security weblog breaks down the techniques in certain depth, but the method in essence goes similar to this: Your organization is service company primarily based exterior the EU. It offers services to consumers outside the house the EU. Its customers can use its services every time they vacation https://www.nathanlabsadvisory.com/blog/tag/red-teaming/