Threat-Led Penetration Testing is the most demanding DORA testing requirement: an intelligence-driven simulation of how an advanced adversary would target the functions you cannot afford to lose, run on live production systems under supervisory oversight and aligned with TIBER-EU.
The result is not a vulnerability list but evidence of how far a real adversary could get and how long they went undetected. That evidence drives remediation and the supervisory conversation that follows.
Because the test runs on production, governance matters as much as the testing itself. A well-prepared Control Team, clear risk management and escalation arrangements, and disciplined provider oversight protect the organisation while keeping the test realistic.
