# ANNEX VIII — Details of the attestation of the TLPT referred to in [Article 26(7)](../../articles/26.md) of Regulation (EU) 2022/2554 **Commission Delegated Regulation (EU) 2025/1190 · binding · OJ L, 2025/1190, 18.6.2025 · dated 13 Feb 2025 [in force]** *In force · Commission Delegated Regulation (EU) 2025/1190, OJ L, 2025/1190, 18.6.2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2025/1190/oj/eng)* The attestation shall contain at least all of the following information: **(a)** on the performed TLPT:\ i) the starting and end dates of the TLPT;\ ii) the critical or important functions in scope of the test;\ iii) where relevant, information on critical or important functions in scope of the test in relation to which the TLPT was not performed;\ iv) where relevant, other financial entities that were involved in the TLPT;\ v) where relevant, the ICT third-party services providers that participated in the TLPT;\ vi) in respect of testers:\ 1) whether internal testers were used;\ 2) whether Article 5(3), second subparagraph, was used by the financial entity;\ vii) the duration, in calendar days, of the active red team testing phase;\ **(b)** where several TLPT authorities have been involved in the TLPT, the other TLPT authorities, and in which capacity;\ **(c)** list of the documents examined by the TLPT authority for the purposes of the attestation.\