Thoughts on red team leadership, threat-led testing, and adversary emulation in regulated and complex environments.