Who needs TLPT under DORA? Mapping the technical criteria
Threat-led penetration testing under DORA is mandatory only for entities designated by their national competent authority. This guide explains the designation criteria in the final RTS, what the testing process requires, and how to determine whether your firm is in scope.
DORATLPTPenetration testing +3