3 docs tagged with "pentest"

Technical and operational indicators for the assessment of the effectiveness of the security testing programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

The seven phases of the Penetration Testing Execution Standard (PTES) as a methodological depth reference for pentest, anchoring the existing offensive validation requirement. A method reference proportional to risk; neither a certification nor a substitute for regulatory TLPT.

Technical and governance preconditions for Threat-Led Penetration Testing (TLPT) in a DORA context, and how SbD-ToE supports the preparation and baseline documentation for regulatory attestation.