A controlled testing framework that mimics the tactics, techniques, and procedures (TTPs) of real-life threat actors to assess and test the resilience of critical live production systems.
Defined in / by
Last updated: 22 August 2026.
Glossary termPublished inDORA
Threat-led penetration testing (TLPT)
Also known as TLPT, Threat-led penetration testing
What does "Threat-led penetration testing (TLPT)" mean under DORA?
Regulations
Digital Operational Resilience Act (DORA)
DORA is Regulation (EU) 2022/2554. It has applied since 17 January 2025 to 20 categories of licensed financial entity, from banks to crypto-asset service providers. It requires an ICT risk management framework, major incident reporting within 4 hours of classification, an annual register of ICT contracts, and threat-led penetration testing every three years.
NextNext register of information cycle, reference date expected 31 December 2026Checked