The Bank of Italy published the introductory remarks delivered by Deputy Director General Chiara Scotti for its conference on threat-led penetration testing, focusing on the transition from experience under the TIBER-IT framework to the threat-led penetration testing (TLPT) rules set by the DORA Regulation. The Rome event brought together the Bank of Italy, Consob and Ivass to discuss the evolution of TIBER-IT, the new regulatory context defined by DORA, and prospects for the TLPT market. The Bank of Italy also released the speech text in PDF and ePub formats and made the conference programme available.