DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)
Organisation, risk management and provider selection – DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)

DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) 6: Article 6: Risk management for pooled or joint TLPT

In a joint or pooled TLPT each entity's control team must run its own risk assessment and set its own risk management measures. The control team of the designated entity must assess the risks of involving several entities, and the other control teams must cooperate with it to identify joint risks.

Maintained by Gerard Blokdyk

Other controls in Organisation, risk management and provider selection – DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) controls