Red teaming tests whether your organisation can detect and stop a determined attacker. Here is how it works, when you need it and how it compares with a penetration test.