← Standards
TIBER-EUBanque centrale européenne

European framework for threat intelligence-based ethical red teaming

The framework that structures threat-led penetration testing in Europe. Three phases — preparation, testing, closure — with strict roles: white team, red team, threat intelligence provider. DORA makes it the reference for the TLPT of its Article 26.

Official text

Who it applies to

  • Designated white teams
  • CISOs of systemic entities
  • Accredited testing providers

Structuring points

  • Testing targets critical functions in production, not a staging environment
  • The blue team must not be informed: that is what gives the test its value
  • The closure report and remediation plan are shared with the authority

Significant financial entities designated by their competent authority.