OFFICIAL REFERENCE
DORA · Regulation (EU) 2022/2554
The primary legislation. Articles 26 and 27 address advanced testing and testers.
THE RESOURCE LIBRARY
TLPT Resources: Report Sample, Scope & Checklist
Prepare your DORA TLPT engagement with a sample report, scoping brief builder, readiness checklist and practical guides.
Start with the source.
OFFICIAL REFERENCE
TLPT RTS · Delegated Regulation (EU) 2025/1190
Detailed requirements for selection, testing methodology, closure and remediation.
OFFICIAL REFERENCE
ECB · TIBER-EU framework and guidance
Framework, participant guidance and templates published by the European Central Bank.
PRACTICAL READING
Make the next step clear.
TLPT procurement3 min read
Commissioning a DORA TLPT: Scope the Critical Function Before Asking for a Quote
A target list is a poor starting point for a DORA threat-led penetration test. Start with the critical or important function, then establish which live production systems, people and suppliers support it.
Read the perspective
TLPT procurement3 min read
DORA TLPT RTS: Compare Provider Proposals Against the Work You Must Deliver
Use the TLPT RTS to evaluate delivery responsibilities, not just the bidder's credentials page. This guide translates a buying decision into questions for the financial entity, intelligence provider and testers.
Read the perspective
TLPT procurement3 min read
Buying DORA Threat Intelligence: From a Critical Function to a Testable Scenario
For a DORA TLPT, the valuable intelligence question is not which threat groups appear in the most reports. It is which credible adversary behaviour could threaten your specific function, and how that can inform a controlled test.
Read the perspective
LET’S START A CONVERSATION
Define the scope.
Take the next step.
Your critical functions. Your authority’s requirements. A clear starting point for your TLPT engagement.
Discuss your TLPT