TLPT / TIBER : transformer les exigences DORA en levier de résilience cyber

This document explains Threat-Led Penetration Tests (TLPT/TIBER) under DORA, outlining their purpose to simulate realistic, intelligence‑driven Red Team attacks across the full attack chain (RECON → IN → THROUGH → OUT), governance and documentation expectations, closure activities (replay workshops and Purple Team), and practical preparation advice. It also presents Intrinsec’s approach—distinct CTI and Red Team teams that coordinate to design and execute exercises—and offers guidance for Control Teams, defining objectives/flags, leg‑ups and regulator-aligned execution.