+ANNEX VIII Details of the attestation of the TLPT referred to in Article 26(7) of Regulation (EU) 2022/2554

ANNEX VIII Details of the attestation of the TLPT referred to in Article 26(7) of Regulation (EU) 2022/2554

ANNEX VIII

Details of the attestation of the TLPT referred to in Article 26(7) of Regulation (EU) 2022/2554

The attestation shall contain at least all of the following information:

(a)

on the performed TLPT:

(i)

the starting and end dates of the TLPT;

(ii)

the critical or important functions in scope of the test;

(iii)

where relevant, information on critical or important functions in scope of the test in relation to which the TLPT was not performed;

(iv)

where relevant, other financial entities that were involved in the TLPT;

(v)

where relevant, the ICT third-party services providers that participated in the TLPT;

(vi)

in respect of testers:

1.

whether internal testers were used;

2.

whether Article 5(3), second subparagraph, was used by the financial entity;

(vii)

the duration, in calendar days, of the active red team testing phase;

(b)

where several TLPT authorities have been involved in the TLPT, the other TLPT authorities, and in which capacity;

(c)

list of the documents examined by the TLPT authority for the purposes of the attestation.

1. Resumen

,

1.1 Referencias

1.2 Requisitos identificados

1.3 Estándares relacionados

2. Requisitos identificados

Requisitos

3. Estándares relacionados

Estándares