Updated 01/07/2025
Coming into force on 08/07/2025

Initial Legal Act
Amendments
Search within this legal act

ANNEX VIII - Delegated Regulation 2025/1190

ANNEX VIII

Details of the attestation of the TLPT referred to in Article 26(7) of Regulation (EU) 2022/2554

The attestation shall contain at least all of the following information:

(a)

on the performed TLPT:

(i)

the starting and end dates of the TLPT;

(ii)

the critical or important functions in scope of the test;

(iii)

where relevant, information on critical or important functions in scope of the test in relation to which the TLPT was not performed;

(iv)

where relevant, other financial entities that were involved in the TLPT;

(v)

where relevant, the ICT third-party services providers that participated in the TLPT;

(vi)

in respect of testers:

1.

whether internal testers were used;

2.

whether Article 5(3), second subparagraph, was used by the financial entity;

(vii)

the duration, in calendar days, of the active red team testing phase;

(b)

where several TLPT authorities have been involved in the TLPT, the other TLPT authorities, and in which capacity;

(c)

list of the documents examined by the TLPT authority for the purposes of the attestation.


ELI: http://data.europa.eu/eli/reg_del/2025/1190/oj

ISSN 1977-0677 (electronic edition)