TPL-106PlanOperational resilienceCyber resilience

Resilience testing programme

Eight test types, scope, frequency, evidence of independence.

Multi-year planning covering vulnerability assessment, end-to-end, performance, restoration, failover, penetration testing, crisis exercise and TLPT. Each row carries evidence of tester independence, an Article 24 requirement often overlooked.

How to use it

Cover every critical system at least annually
Document the independence of internal testers
Track remediation of high-severity findings

Courses that use it

DR-302

Resilience testing and TLPT

Related templates

TPL-050

Important business services register

Client-side phrasing, owner, tolerance, measured capability, gap.

TPL-051

Annual resilience self-assessment

The document the board approves and the supervisor requests.

TPL-052

End-to-end dependency map

Six layers, one row per dependency, sortable by substitutability.

TPL-053

Single point of failure register

Qualification, treatment or explicit acceptance, with review date.