Red Teaming for Policy

In cyber security, red teaming describes the practice of simulating attacks on your digital systems: A dedicated team of hired security experts to attack your systems. It’s a role play of sorts — you give someone trusted the mandate to attack, to find your weaknesses. I wish we had more red teaming for policy. A hired group of experts with the mandate to find flaws, weaknesses, ways to avoid or misuse or abuse a given policy proposal. This should be a regular part of the policy process in order to get a step ahead, rather than playing catch-up to policies that don’t deliver as intended. Policy red teaming exists in places. I believe the UK does it in some contexts, in some geopolitical security contexts apparently, too. But I wish we could get this as part of every legislative process.