{"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2022-12-27","gaps":[],"covered":["DORA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":null,"checked_against":null},"truncation":{"shown":19,"total":19,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/dora/articles/26","url":"https://www.headlesslaw.com/dora/articles/26","title":"Article 26 — Advanced testing of ICT tools, systems and processes based on TLPT","work_id":"dora","date_state":"past","as_of":"2022-12-27","relations_url":"https://www.headlesslaw.com/dora/articles/26/relations"},"as_of":"2022-12-27","counts":{"uses_term:out":9,"refers_to:out":6,"refers_to:in":4},"relations":[{"edge_id":"4e1e26dcd23252db790d","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service provider","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.4"}},{"edge_id":"e4289fb431ed31d4fca3","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT services","dst_raw":"eu.dora.definition.ict-services","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/21","url":"/definitions/dora/ict-services","title":"Definitions","key":"3(21)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.4"}},{"edge_id":"b891297680c4689601e5","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.2"}},{"edge_id":"569a34ae932d2f45e208","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"critical or important functions","dst_raw":"eu.dora.definition.critical-or-important-function","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/22","url":"/definitions/dora/critical-or-important-function","title":"Definitions","key":"3(22)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.5"}},{"edge_id":"85058a1d0fcba9732ea2","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.5"}},{"edge_id":"cf203203c7223c626db9","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT third-party service providers","dst_raw":"eu.dora.definition.ict-third-party-service-provider","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/19","url":"/definitions/dora/ict-third-party-service-provider","title":"Definitions","key":"3(19)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.3"}},{"edge_id":"63bf820c3331a73f3f4d","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"public authority","dst_raw":"eu.dora.definition.public-authority","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/65","url":"/definitions/dora/public-authority","title":"Definitions","key":"3(65)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.9"}},{"edge_id":"61a9937aeec8f5f60365","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"ICT risk","dst_raw":"eu.dora.definition.ict-risk","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/5","url":"/definitions/dora/ict-risk","title":"Definitions","key":"3(5)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8.point.c"}},{"edge_id":"1ff97d615f4a0126ae20","scope":"unit","type":"refers_to","direction":"out","resolution":"external","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 6(4)","dst_raw":"Regulation (EU) No 1024/2013","other":null,"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8","target_act":"Regulation (EU) No 1024/2013","target_celex":"32013R1024"}},{"edge_id":"411a9340e211f9018ac4","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 4(2)","dst_raw":"eu.dora.article.4","other":{"work_id":"dora","level":"L1","locator":"dora/art/4","url":"/dora/articles/4","title":"Proportionality principle","key":"4","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8"}},{"edge_id":"5e83e9763f91aadb623c","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 27","dst_raw":"eu.dora.article.27","other":{"work_id":"dora","level":"L1","locator":"dora/art/27","url":"/dora/articles/27","title":"Requirements for testers for the carrying out of TLPT","key":"27","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8"}},{"edge_id":"bb709e8573f4fc6874a1","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 27(1)","dst_raw":"eu.dora.article.27","other":{"work_id":"dora","level":"L1","locator":"dora/art/27","url":"/dora/articles/27","title":"Requirements for testers for the carrying out of TLPT","key":"27","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.8"}},{"edge_id":"56bc1556784534fa0a9c","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 16(1)","dst_raw":"eu.dora.article.16","other":{"work_id":"dora","level":"L1","locator":"dora/art/16","url":"/dora/articles/16","title":"Simplified ICT risk management framework","key":"16","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.1"}},{"edge_id":"d488b75ac21f49b63a80","scope":"unit","type":"uses_term","direction":"out","resolution":"resolved","basis":"curated_link_pass","method":"extracted_relationships","confidence":"high","src_from":"2022-12-27","src_until":null,"span":"microenterprises","dst_raw":"eu.dora.definition.microenterprise","other":{"work_id":"dora","level":"L1","locator":"dora/art/3/para/60","url":"/definitions/dora/microenterprise","title":"Definitions","key":"3(60)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.1"}},{"edge_id":"19f3fdd3d4e44aa43978","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 27","dst_raw":"eu.dora.article.27","other":{"work_id":"dora","level":"L1","locator":"dora/art/27","url":"/dora/articles/27","title":"Requirements for testers for the carrying out of TLPT","key":"27","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.26","source_block_id":"eu.dora.article.26.paragraph.10"}},{"edge_id":"2544da410887aecc81c0","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 26","dst_raw":"eu.dora.article.26","other":{"work_id":"dora","level":"L1","locator":"dora/art/13/para/3","url":"/dora/articles/13#p-3","title":"Learning and evolving","key":"13(3)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.13","source_block_id":"eu.dora.article.13.paragraph.3"}},{"edge_id":"37c4b2abfe03454ded20","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 26","dst_raw":"eu.dora.article.26","other":{"work_id":"dora","level":"L1","locator":"dora/art/24/para/2","url":"/dora/articles/24#p-2","title":"General requirements for the performance of digital operational resilience testing","key":"24(2)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.24","source_block_id":"eu.dora.article.24.paragraph.2"}},{"edge_id":"90df591308b43a1d55f0","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 26","dst_raw":"eu.dora.article.26","other":{"work_id":"dora","level":"L1","locator":"dora/art/30/para/3/pt/d","url":"/dora/articles/30#p-3-d","title":"Key contractual provisions","key":"30(3)(d)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.30","source_block_id":"eu.dora.article.30.paragraph.3.point.d"}},{"edge_id":"a2a9ebacbc798fbbc654","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2022-12-27","src_until":null,"span":"Article 26(9)","dst_raw":"eu.dora.article.26","other":{"work_id":"dora","level":"L1","locator":"dora/art/27/para/2/pt/a","url":"/dora/articles/27#p-2-a","title":"Requirements for testers for the carrying out of TLPT","key":"27(2)(a)","state_on_date":"in_force"},"evidence":{"object":"eu.dora.legal_text.article.27","source_block_id":"eu.dora.article.27.paragraph.2.point.a"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}