Execute appropriate ICT testing programme tests

Execute appropriate tests as part of the digital operational resilience testing programme, including vulnerability assessments, scans, open source analyses, network security assessments, gap analyses, physical security reviews, questionnaires, scanning software solutions, source code reviews where feasible, scenario-based tests, compatibility testing, performance testing, end-to-end testing and penetration testing, in accordance with criteria set out in Article 4(2).