Glossary
TLPT
Threat-Led Penetration Testing — penetration tests based on real threats, mandatory for the most significant financial entities.
TLPT (Threat-Led Penetration Testing) is an advanced intrusion test that simulates realistic attacks, inspired by threats actually observed against the financial sector, against an entity's production systems.
DORA requires this type of test at least every three years for financial entities designated as significant by their competent authority, as part of the "digital operational resilience testing" pillar (Articles 24 to 27). The European TIBER-EU framework (Threat Intelligence-based Ethical Red Teaming) serves as the methodological reference for these tests.