ANNEX VIII — Details of the attestation of the TLPT referred to in [Article 26(7)](../../articles/26.md) of Regulation (EU) 2022/2554

The attestation shall contain at least all of the following information:

(a) on the performed TLPT:
i) the starting and end dates of the TLPT;
ii) the critical or important functions in scope of the test;
iii) where relevant, information on critical or important functions in scope of the test in relation to which the TLPT was not performed;
iv) where relevant, other financial entities that were involved in the TLPT;
v) where relevant, the ICT third-party services providers that participated in the TLPT;
vi) in respect of testers:
1) whether internal testers were used;
2) whether Article 5(3), second subparagraph, was used by the financial entity;
vii) the duration, in calendar days, of the active red team testing phase;
(b) where several TLPT authorities have been involved in the TLPT, the other TLPT authorities, and in which capacity;
(c) list of the documents examined by the TLPT authority for the purposes of the attestation.\