[non-validated] DORA SFS C / SF 5 (placeholder)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] [Placeholder] Has DORA condition 5 in "DORA: Threat-led penetration testing" been evidenced?
Explanation
[non-validated] DORA authoring placeholder; this is not an assessment.
Criterion and evidence
Define the applicable entity role, condition, evidence period and decision rule from verified DORA sources.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Threat-led penetration testing. Determine TLPT applicability and govern advanced testing where the entity is selected or required to participate. Cover authority-driven selection, test scope, critical functions, tester independence/qualification, threat intelligence, live-system safeguards, third-party participation, remediation and mutual recognition. Do not impose TLPT on all financial entities or claim tests were executed by generating a plan. DORA article references: 26, 27. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.