Finextra

A Deep Dive into DORA's Threat-Led Penetration Testing Requirements

Welcome back to my blog series on DORA regulation !!! In this blog, I will dive into the specific topic of Threat-Led Penetration Testing (TLPT). Key Players in the TLPT Ecosystem: Understanding the ...
JD Supra

EU Standards for Threat-Led Penetration Testing: New Cyber Compliance Imperatives for Financial Institutions

The Situation: The EU has introduced Delegated Regulation (EU) 2025/1190, establishing the first harmonized standards for threat-led penetration testing ("TLPT") across the financial sector. The ...
JD Supra

European Commission adopts Delegated Regulation on RTS on threat-led penetration testing under DORA

The European Commission (EC) has adopted a Commission Delegated Regulation supplementing the Digital Operational Resilience Act (DORA) with regard to RTS specifying the criteria used for identifying ...
Na Presseportal

Financial Service Providers Need to Catch Up on TLPT

Since the implementation of the Digital Operational Resilience Act (DORA) on January 17th this year, financial institutions in the EU are required to conduct regular Threat-Led Penetration Testing ...
Times of Malta

Beyond traditional penetration testing

October marks Cybersecurity Awareness Month, a timely reminder for organisations to examine how resilient they are against today’s evolving cyber threats. Unfortunately, many businesses still treat ...
Finextra

Navigating Operational Resilience: A Comparative Look at DORA, TLPT, and Beyond

This is the first installment in my series of blogs exploring the dynamic world of operational resilience regulatory frameworks, with a special focus on DORA (Digital Operational Resilience Act) and ...