TIBER-EU process
How a TIBER-EU test runs from written notification to attestation: the parties involved, the three phases and their process steps, deliverables and approvals at each step, and how long a test takes.
TIBER-EU guides
Buyer guides for entities facing a TIBER-EU or DORA threat-led penetration test: the end-to-end process and timeline, how TIBER-EU relates to DORA TLPT, and how to choose threat intelligence and red team providers.
TIBER-EU and DORA TLPT
How TIBER-EU relates to threat-led penetration testing under DORA: the legal link, the 2025 alignment, matching timelines and deliverables, who counts as the authority, rules on internal testers, cross-border tests and mutual recognition, and use outside DORA.
Choosing TIBER-EU threat intelligence and red team providers
How to select providers for a TIBER-EU or DORA threat-led test: team size, experience and reference minimums, certifications and insurance, independence and conflict rules, contract checklists, internal testers, and how the test manager reviews the choice.
TIBER-EU cost: what a threat-led red team test costs
What a TIBER-EU test costs and who pays: provider fees for threat intelligence and red teaming, internal control team hours per phase, remediation, authority fees where a country charges them, the ESA estimate as a share of ICT budget, and how scope and multi-party tests change the bill.
Is TIBER-EU mandatory? Who has to run a TIBER test
Whether an entity must run a TIBER-EU test: voluntary adoption by authorities, voluntary tests in most countries, mandatory DORA TLPT for identified entities and the criteria used, the 3-year cycle, exclusions, and when a voluntary test still makes sense.
TIBER-EU readiness: is your organization ready for a test
How to judge readiness for a TIBER-EU test before the authority's notification: the prerequisites DNB and the Bundesbank set out, board support, prior red teaming, staffing the control and blue teams, backups and contracts that allow testing at suppliers, and budgeting for remediation.
TIBER-EU 2025 update: what changed in the framework
What the January 2025 TIBER-EU framework changed and what it means for a test underway or planned: alignment with the DORA TLPT standards and deadlines, mandatory purple teaming, the Control Team name, new guidance documents, shorter national implementation documents, and how national programmes updated.
TIBER-EU for ICT third-party service providers
What a TIBER-EU or DORA threat-led test means for cloud, outsourcing and intra-group ICT providers whose customers are tested: when provider systems fall in scope, contract clauses, scenarios on provider infrastructure, pooled and multi-party tests, detection by provider staff and what providers should prepare.
TIBER-EU support: what to outsource and what to keep
Which parts of a TIBER-EU test an entity can hand to outside help and which it must own: external threat intelligence and red team providers, an external control team lead, project and evidence support, the independence and conflict rules that limit who can do what, and the test manager's role.
