TIBER-EU Navigator
A free reference for the threat-led penetration testing lifecycle under Regulation (EU)
2022/2554 (DORA), Commission Delegated Regulation (EU) 2025/1190 (the regulatory
technical standards on TLPT) and the TIBER-EU framework. It sets out every phase,
milestone, duty, role and deliverable of a test beside the article, annex or guidance
section it rests on, with the source text quoted verbatim.
Written for test managers, control team leads and control team members, testers,
threat intelligence providers and TLPT authorities — as a reference during a live
engagement and as an onboarding and training aid.
Unofficial. Only the Official Journal text of DORA and Regulation (EU) 2025/1190 is
authentic; TIBER-EU guidance is published by the European Central Bank.
This app needs JavaScript to draw the lifecycle and the register.