Skip to main content
DORARegulation (EU) 2022/2554

Article 27: Requirements for testers for the carrying out of TLPT

DORA Art. 27, Chapter IV

1. Financial entities shall only use testers for the carrying out of TLPT, that: (a) are of the highest suitability and reputability; (b) possess technical and organisational capabilities and demonstrate specific expertise in threat intelligence, penetration testing and red team testing; (c) are certified by an accreditation body in a Member State or adhere to formal codes of conduct or ethical fr

259 words in the official text.

Sits inside (1)

Cites (1)

Source texts: the Official Journal, through the Publications Office. Dataset built 2026-07-29. Study aid, not legal advice.

DORA 32022R2554

Every connection on this page is drawn from the official text of Regulation (EU) 2022/2554. Study aid, not legal advice.

See how DORA sits beside the other three acts on the crossover map, or find what your role must do in the obligations checklist.

Useful to someone you work with?

GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.