2025/2574(DEA)

Regulatory technical standards specifying the criteria used for identifying financial entities required to perform threat-led penetration testing, the requirements and standards governing the use of internal testers, the requirements in relation to the scope, testing methodology and approach for each phase of the testing, results, closure and remediation stages and the type of supervisory and other relevant cooperation needed for the implementation of TLPT and for the facilitation of mutual recognition

Basic information

2025/2574(DEA)

DEA - Delegated acts procedure

Supplementing 2020/0266(COD)

Subject

2.50.03 Securities and financial markets, stock exchange, CIUTS, investments
2.50.04 Banks and credit
2.50.08 Financial services, financial reporting and auditing
2.50.10 Financial supervision
3.30.06 Information and communication technologies, digital technologies

Status

Procedure completed - delegated act enters into force

Key players

Key events

Date Event Reference Summary
13/02/2025 Non-legislative basic document published C(2025)00885
13/02/2025 Initial period for examining delegated act 3 month(s)
12/03/2025 Committee referral announced in Parliament
21/05/2025 Delegated act not objected by Parliament

Technical information

Procedure reference 2025/2574(DEA)
Procedure type DEA - Delegated acts procedure
Procedure subtype Examination of delegated act
Amendments and repeals Supplementing 2020/0266(COD)
Stage reached in procedure Procedure completed - delegated act enters into force
Committee dossier ECON/10/02169

Documentation gateway

  • Document type Reference Date Summary
    Non-legislative basic document C(2025)00885 13/02/2025
    Document attached to the procedure C(2025)2322 11/04/2025
    Document attached to the procedure C(2025)3781 10/06/2025