4. Following the validation of the TLPT initiation information by the TLPT authority, the financial entity shall set up a control team to support the control team lead in its tasks of:
|
(a)
|
specifying communications channels and processes within the control team, with the testers and the threat intelligence providers in all matters related to the TLPT;
|
|
(b)
|
informing the management body of the financial entity about the progress of the TLPT and the associated risks;
|
|
(c)
|
taking decisions based on subject matter expertise throughout the TLPT;
|
|
(d)
|
executing the TLPT in compliance with this Regulation;
|
|
(e)
|
selecting the threat intelligence provider for the TLPT;
|
|
(f)
|
selecting the external testers, the internal testers or both;
|
|
(g)
|
preparing the scope specification document.
|