Skip to the text

DORA › Level 2 › RTS

Commission Delegated Regulation (EU) 2025/1190 of 13 February 2025

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria used for identifying financial entities required to perform threat-led penetration testing, the requirements and standards governing the use of internal testers, the requirements in relation to the scope, testing methodology and approach for each phase of the testing, results, closure and remediation stages and the type of supervisory and other relevant cooperation needed for the implementation of TLPT and for the facilitation of mutual recognition (Text with EEA relevance)

Full documentArticle 17 of 17 · 8 annexes

In this act Article 17 of 17

Article 17 — Entry into force

Financial servicesLevel 2RTSDORAIn forceOfficial source

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

About this text

Commission Delegated Regulation (EU) 2025/1190 · binding · OJ L, 2025/1190, 18.6.2025 · dated 13 Feb 2025 [in force]

In force · Commission Delegated Regulation (EU) 2025/1190, OJ L, 2025/1190, 18.6.2025 · Checked against EUR-Lex on 26 Oct 2026 · Official source

Status: In force
Coverage: No English consolidation exists. We hold the text as verified on 26 October 2026; earlier dates show “We don’t hold the text for this date”.
Freshness: Release a4f2a049 published 1 Nov 2026, 17:41 CET. This article checked word for word against EUR-Lex on 26 Oct 2026.
Shown: The whole article.
Failures: None.
Incomplete: No.
Instrument: Commission Delegated Regulation (EU) 2025/1190 (RTS)
CELEX: 32025R1190
OJ reference: OJ L, 2025/1190, 18.6.2025
Drafted by: ESAs
Legal nature: Binding
Legal basis: Article 26(11) DORA
Adopted: 13 February 2025
In force: 8 July 2025
Corrigenda: None in English (CELLAR)
Related instruments: None recorded
Text on this page: Word for word — title, recitals, articles and annexes as in the OJ act; not reproduced: citations, enacting formula, closing formula, signature and OJ footnotes

Time travel

Versions1

Implements · Level 11

26Advanced testing of ICT tools, systems and processes based on TLPTwhole act

Cited by · Level 30

None linked in our corpus. We hold 107 DORA Level 3 documents; see all.

Refers to0

None linked in our corpus.

Defined terms0

None linked in our corpus.