Glossary · DORA
TIBER-EU
The European framework for Threat Intelligence-Based Ethical Red Teaming, developed by the ECB, on which DORA's TLPT requirements build.
Explained in depth: DORA overview
TIBER-EU (Threat Intelligence-Based Ethical Red teaming) is the framework the European Central Bank published in 2018 to standardise how sophisticated attack simulations against financial institutions are run: how threat intelligence is gathered, how red teams are procured and controlled, how tests against live systems are kept safe, and how results are shared with authorities. Before DORA, TIBER tests were voluntary and adopted country by country. DORA turns the concept into a legal obligation through its TLPT requirements, and the TIBER-EU framework has been aligned with the DORA regulatory technical standards, so a TIBER-aligned test is the standard way of satisfying the TLPT mandate.
Why it matters
If your organisation faces TLPT, the TIBER-EU documentation is the practical manual: it defines the roles (white team, red team, threat intelligence provider), phases, and safeguards your test will follow. Test providers and authorities both speak TIBER.