Blue teaming is the practice of creating and protecting a security environment and responding to incidents that threaten that environment. Blue team cybersecurity operators are adept at monitoring the security environment they protect for vulnerabilities, whether pre-existing or induced by attackers. Blue teamers manage security incidents and use the lessons learned to harden the environment against future attacks.