The Hellenic Capital Market Commission and the Bank of Greece have jointly adopted the revised Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) framework nationally through the TIBER-GR National Implementation Document. The framework is designed so that threat-led penetration testing (TLPT) meets the applicable requirements of Regulation (EU) 2022/2554 (DORA). A TLPT Cyber Team Greece (TCT-GR), staffed by both authorities, will be established to coordinate and support testing under TIBER-GR. Testing follows the TIBER-EU methodology, simulating real-world cyberattacks on financial entities’ critical production systems and functions to improve digital operational resilience. TLPT is mandatory for financial entities within DORA’s scope that meet the eligibility criteria in Commission Delegated Regulation (EU) 2025/1190.
Hellenic Capital Market Commission and Bank of Greece adopt revised TIBER-EU framework for cyber resilience testing
The Hellenic Capital Market Commission and the Bank of Greece have adopted the revised TIBER-EU framework nationally through TIBER-GR for threat-led penetration testing that meets DORA requirements. Testing simulates cyberattacks on critical production systems and functions and is mandatory for financial entities within DORA’s scope that meet the applicable eligibility criteria. A joint team drawn from both authorities will coordinate and support the tests.