The Bank of Greece and the Hellenic Capital Market Commission have jointly adopted the revised Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) framework nationally through the TIBER-GR National Implementation Document. A TLPT Cyber Team Greece (TCT-GR), comprising personnel from both authorities, will be established to coordinate and support threat-led penetration testing (TLPT) under the national framework. TIBER-GR follows the European methodology, under which tests simulate real cyberattacks on financial entities’ critical production systems and functions to improve digital operational resilience. The framework is designed so that tests meet the applicable TLPT requirements of Regulation (EU) 2022/2554 (DORA). Testing is mandatory for financial entities within DORA’s scope that meet the eligibility criteria set out in Commission Delegated Regulation (EU) 2025/1190.
Bank of Greece and Hellenic Capital Market Commission adopt revised TIBER-EU framework for cyber resilience testing
The Bank of Greece and the Hellenic Capital Market Commission have adopted the revised TIBER-EU framework nationally for threat-led penetration testing of financial entities’ critical systems and functions. Testing is mandatory for entities within the scope of Regulation (EU) 2022/2554 that meet the applicable eligibility criteria. A team drawn from both authorities will coordinate and support tests under the TIBER-GR framework.