How long does a red team exercise take?

Typical engagements run 4-8 weeks for full exercises, 2-4 weeks for assume-breach assessments. Regulatory exercises (TIBER/DORA) may require longer timelines depending on scope and coordination requirements.