TLPT (threat-led penetration testing)

Threat-led penetration testing is advanced security testing in which a red team attacks live production systems following scenarios built from real threat intelligence about the entity. Under DORA, financial entities designated by their authority must run TLPT at least every three years, following the TIBER-EU framework. It differs from ordinary penetration testing in scope, realism, and the requirement to test live critical functions.

Läs definitionen på svenska: TLPT (hotbildsstyrd penetrationstestning)

Also known as: TIBER-EU · Red team testing