EU-DORA-26-10
Requirement
26 — Advanced testing of ICT tools, systems and processes based on TLPT
Use only external testers (significant credit institutions)
Description
Credit institutions classified as significant under Article 6(4) of Regulation (EU) No 1024/2013 must only use external testers in accordance with Article 27(1), points (a) to (e).
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-26-01
Requirement
Conduct TLPT every 3 years
EU-DORA-26-02
Requirement
Cover critical/important functions in TLPT
EU-DORA-26-03
Requirement
Identify underlying ICT systems for TLPT
EU-DORA-26-04
Requirement
Assess TLPT scope and obtain validation
EU-DORA-26-05
Requirement
Ensure ICT third-party participation in TLPT
EU-DORA-26-06
Risk Management
Apply risk management controls during TLPT
EU-DORA-26-07
Reporting
Provide TLPT summary and remediation plans
EU-DORA-26-08
Reporting
Notify competent authority of TLPT attestation
EU-DORA-26-09
Requirement
Contract appropriate testers for TLPT
EU-DORA-26-11
Requirement
Identify financial entities for TLPT requirement
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started