DORA TLPT Requirements Explained: Where Threat Intelligence Fits
DORA requires selected EU financial firms to run threat-led penetration tests at least every three years.
Under DORA Article 26 and Regulation (EU) 2022/2554, certain EU financial entities must conduct threat-led penetration testing at least once every three years, with frequency adjustable by risk. Tests cover critical functions on live production systems under Commission Delegated Regulation (EU) 2025/1190 and align with TIBER-EU. Phases include preparation, at least 12 weeks of intelligence-led red teaming, then closure, purple teaming, remediation, and attestation overseen by national authorities. ANY.RUN argues current threat intelligence should shape the scenarios and promotes its lookup data.
34