Regulatory Alerts2025-07-07
Added · Updated
MFSA Guidance on Threat-Led Penetration Testing (TLPT) under DORA and TIBER-EU
The Malta Financial Services Authority (MFSA) has issued guidance designating itself as the TLPT Authority for entities subject to the Digital Operational Resilience Act (DORA). The document mandates that identified Financial Entities undergo Threat-Led Penetration Testing using the TIBER-EU framework, specifically through the national TIBER-MT implementation. This approach ensures standardized cyber resilience assessments while allowing for attestation provided all regulatory requirements are met during the testing process.
Topics
Share