threat-led penetration testing (TLPT)

Regulation (EU) 2022/2554

Definition

(17) 'threat-led penetration testing (TLPT)' means a framework that mimics the tactics, techniques and procedures of real-life threat actors perceived as posing a genuine cyber threat, that delivers a controlled, bespoke, intelligence-led (red team) test of the financial entity's critical live production systems;

Source

DORA, Article 3, point (17).

Used in DORA

• Not used outside Article 3.