# ANNEX VI — Content of the blue team test report (Article 12(4)) **Commission Delegated Regulation (EU) 2025/1190 · binding · OJ L, 2025/1190, 18.6.2025 · dated 13 Feb 2025 [in force]** *In force · Commission Delegated Regulation (EU) 2025/1190, OJ L, 2025/1190, 18.6.2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2025/1190/oj/eng)* The blue team test report shall contain information on at least all of the following: **(1)** for each attack step described by the testers in the red team test report:\ a) list of detected attack actions;\ b) log entries corresponding to these detections;\ **(2)** assessment of the findings and recommendations of the testers;\ **(3)** evidence of the attack by the testers collected by the blue team;\ **(4)** blue team root cause analysis of successful attacks by the testers;\ **(5)** list of lessons learned and identified potential for improvement;\ **(6)** list of topics to be addressed in purple teaming.\