OtherEuropean Union
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)
What is DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)?
DORA Level 2 regulatory technical standards on threat-led penetration testing: which entities must test, control team and secrecy arrangements, tester and threat intelligence provider qualifications, the preparation, threat intelligence, red team (at least 12 weeks) and closure phases, remediation plans and internal testers. It comprises 16 controls organised across 4 domains, and applies in the European Union.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) overlaps with the standards you already hold
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs ISO 27001:2022View comparison →DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs SOC 2View comparison →DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs NIST CSF 2.0View comparison →DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs GDPRView comparison →DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs HIPAAView comparison →DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) vs PCI DSS 4.0View comparison →
What DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) means in your sector
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Healthcare→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Financial Services→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Technology→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Government→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Manufacturing→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Energy→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Retail→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Education→
What DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) means for your job
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for CISOs→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Compliance Officers→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Risk Managers→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for IT Directors→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for DPOs→DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) for Auditors→
Questions people ask about DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)
What is DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)?
DORA Level 2 regulatory technical standards on threat-led penetration testing: which entities must test, control team and secrecy arrangements, tester and threat intelligence provider qualifications, the preparation, threat intelligence, red team (at least 12 weeks) and closure phases, remediation plans and internal testers.
How many controls does DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) have?
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) contains 16 controls organized across 4 domains.
Where does DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) apply?
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) applies in European Union. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) is covered here?
This page covers OJ L 2025/1190 of 18 June 2025.
Query DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) programmatically
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190), its 16 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) API reference and MCP config →How ready are you for DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .