Article 26 TLPT-Supporting Exercises for Financial Institutions
The EU Digital Operational Resilience Act (DORA) requires financial institutions—including banks, insurers, investment firms, and payment providers—to conduct threat-led penetration testing (TLPT) and resilience exercises under Article 26. These structured tabletop scenarios provide the facilitated discussion, documented evidence, and compliance-mapped After Action Reports your organization needs to demonstrate DORA readiness to national competent authorities.
No account required for demo · 3 scenarios free · Cancel anytime
Every scenario maps to specific DORA articles so your compliance team can build a documented evidence trail for supervisory authorities and internal audit functions.
Scenarios cover banking, insurance, capital markets, and payment systems—with injects designed around real threat actors targeting the European financial sector.
A ransomware group encrypts a major bank payment processing infrastructure during peak settlement hours. Teams navigate DORA Article 26 classification thresholds, competent authority notification timelines, and coordinated response with payment scheme operators and the ECB.
Inspired by the 2016 Bangladesh Bank heist. An adversary compromises SWIFT operator credentials and initiates fraudulent international transfers. Teams must activate recall procedures, notify correspondents, and manage regulatory disclosure under DORA 4-hour initial notification requirement.
A major cloud hyperscaler suffers a multi-region outage affecting dozens of financial institutions simultaneously. Teams assess DORA third-party ICT provider concentration risk, activate manual fallback procedures, and demonstrate to supervisors that critical functions remain operable.
A critical ICT third-party provider is compromised via a supply chain attack, exposing policyholder data and disrupting claims processing across multiple financial entities. Teams invoke DORA Articles 28-44 third-party risk provisions and coordinate exit strategy planning with EIOPA guidance.
An adversary manipulates trading venue infrastructure to inject false market data, causing algorithmic trading systems to generate erroneous orders during peak market hours. Teams halt trading, coordinate with exchange operators, and assess DORA TLPT evidence requirements under ESMA MiFID II.
No facilitation experience required. Our platform guides you through every phase of a CISA CTEP-format tabletop exercise.
No credit card required to access 3 full scenarios with complete facilitator guides.