Recitals
The 30 recitals of TLPT RTS (EU 2025/1190)
Recitals are not binding, but they say why the text reads as it does. Regulators and courts rely on them to interpret an ambiguous article — that is often where a reading is decided.
- 1. This Regulation has been drafted in accordance with the TIBER-EU...
- 2. Considering the complexity of the TLPT and the risks relating to it,...
- 3. TLPT authorities should assess, in light of an overall assessment of...
- 4. Financial entities may have the same ICT intra-group service provider...
- 5. To mirror the TIBER-EU framework, it is necessary that the testing...
- 6. To ensure that the TLPT benefits from the experience developed in the...
- 7. To mirror the TIBER-EU framework methodology, test managers should...
- 8. It is important, for consistency with the TIBER-EU framework, that...
- 9. The secrecy of TLPT is of utmost importance to ensure that the...
- 10. As evidenced through the experience gathered in the TIBER-EU...
- 11. There are inherent elements of risks associated with TLPT as critical...
- 12. Conventional penetration tests provide a detailed and useful...
- 13. There may be exceptional circumstances where financial entities are...
- 14. Where several financial entities and several TLPT authorities are...
- 15. As evidenced by the experience of the implementation of the TIBER-EU...
- 16. To ensure the smooth performance of the TLPT, the TLPT authority...
- 17. The financial entity should select the critical or important...
- 18. To provide the testers with the information needed to simulate a...
- 19. To enable the testers to gain insight and further review the scope...
- 20. To enable testers to conduct a realistic and comprehensive testing in...
- 21. During the active red team testing phase, the testers should deploy a...
- 22. While carrying out a TLPT, testers should act considering the time...
- 23. During the active red teaming in the testing phase, if necessary to...
- 24. The TLPT should be used as a learning experience to enhance the...
- 25. To further facilitate the learning experience of all parties involved...
- 26. The competent authorities referred to in Article 46 of Regulation...
- 27. Article 26(8), first subparagraph, of Regulation (EU) 2022/2554...
- 28. This Regulation is based on the draft regulatory technical standards...
- 29. The European Supervisory Authorities have conducted open public...
- 30. The European Data Protection Supervisor was consulted in accordance...
