The European framework for Threat Intelligence-based Ethical Red teaming, maintained by the ECB and the Eurosystem. The pillar covers the preparation, testing and closure phases of a TIBER-EU test, their deliverables, and how a TIBER-EU test meets DORA threat-led penetration testing.
The first TIBER-EU phase, lasting up to six months from the authority's written notification: notification and initiation, setting up the control team and risk management, scoping critical or important functions and flags, and procuring the threat intelligence provider and red team testers.
The second TIBER-EU phase: targeted threat intelligence and scenario selection by the threat intelligence provider, the red team test plan, and at least 12 weeks of active red team testing against the flags under control team and test manager supervision.
The final TIBER-EU phase: red team and blue team test reports, replay and purple teaming within 10 weeks of the end of active testing, 360 degree feedback, the test summary report and remediation plan within 8 weeks of the authority's assessment, and the attestation.
How each country and the ECB run TIBER-EU: the authority and TIBER Cyber Team, who is tested, voluntary tests versus mandatory DORA TLPT, national documents and rules that add to the framework, and contacts. One page per implementation with published sources.
Buyer guides for entities facing a TIBER-EU or DORA threat-led penetration test: the end-to-end process and timeline, how TIBER-EU relates to DORA TLPT, and how to choose threat intelligence and red team providers.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.