Article 10 3

(a)

the recommendation by the threat intelligence provider and the threat-led nature of each scenario;

(b)

the input provided by the test managers;

(c)

the feasibility of the proposed scenarios for execution, based on the expert judgement of the testers;

(d)

the size, complexity and overall risk profile of the financial entity and the nature, scale, and complexity of its services, activities, and operations.