OFFICIAL REFERENCE
DORA · Regulation (EU) 2022/2554
The primary legislation. Articles 26 and 27 address advanced testing and testers.
THE RESOURCE LIBRARY
Prepare with the
right information.
Primary sources, practical guidance and an ungated checklist for your next TLPT.
Start with the source.
OFFICIAL REFERENCE
TLPT RTS · Delegated Regulation (EU) 2025/1190
Detailed requirements for selection, testing methodology, closure and remediation.
OFFICIAL REFERENCE
ECB · TIBER-EU framework and guidance
Framework, participant guidance and templates published by the European Central Bank.
PRACTICAL READING
Make the next step clear.
Requirements3 min read
TLPT vs penetration testing: what changes under DORA?
Why a conventional penetration test does not automatically meet the requirements of a DORA threat-led exercise.
Read the perspective
Planning3 min read
How to scope a DORA TLPT around critical functions
Start with the function, trace the dependencies and make the boundary of the test explicit.
Read the perspective
Planning3 min read
How long does a DORA TLPT take?
Understand the 12-week active-testing minimum and the preparation and closure work that sit around it.
Read the perspective
LET’S START A CONVERSATION
Define the scope.
Take the next step.
Your critical functions. Your authority’s requirements. A clear starting point for your TLPT engagement.
Discuss your TLPT