Skip to the text

DORA › Level 2 › RTS

Commission Delegated Regulation (EU) 2025/1190 of 13 February 2025

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria used for identifying financial entities required to perform threat-led penetration testing, the requirements and standards governing the use of internal testers, the requirements in relation to the scope, testing methodology and approach for each phase of the testing, results, closure and remediation stages and the type of supervisory and other relevant cooperation needed for the implementation of TLPT and for the facilitation of mutual recognition (Text with EEA relevance)

Full documentAnnex IV of 8 · 17 articles

In this act Annex IV of 8

ANNEX IV — Content of the red team test plan (Article 11(1))

Financial servicesLevel 2RTSDORANot shownOfficial source

No text for this date

About this text

Commission Delegated Regulation (EU) 2025/1190 · binding · OJ L, 2025/1190, 18.6.2025 · dated 13 Feb 2025 [in force]

Not shown · No text for this date · — · Official source

Coverage: No English consolidation exists. We hold the text as verified on 26 October 2026; earlier dates show “We don’t hold the text for this date”.
Freshness: Release a4f2a049 published 1 Nov 2026, 17:41 CET. This annex checked word for word against EUR-Lex on 26 Oct 2026.
Shown: No text for this date
Failures: None.
Incomplete: No.
Instrument: Commission Delegated Regulation (EU) 2025/1190 (RTS)
CELEX: 32025R1190
OJ reference: OJ L, 2025/1190, 18.6.2025
Drafted by: ESAs
Legal nature: Binding
Legal basis: Article 26(11) DORA
Adopted: 13 February 2025
In force: 8 July 2025
Corrigenda: None in English (CELLAR)
Related instruments: None recorded
Text on this page: Word for word — title, recitals, articles and annexes as in the OJ act; not reproduced: citations, enacting formula, closing formula, signature and OJ footnotes

Time travel