How ‘purple teams’ collaborate to assess cybersecurity threats