- attack path
means the route followed by testers during the active red team testing phase of the TLPT to reach the flags specified for that TLPT;
- blue team
means the staff of the financial entity and, where relevant, staff of the financial entity’s third-party service providers and any other party deemed relevant in consideration of the scope of the TLPT, of the financial entity’s third-party service providers, that are defending a financial entity's use of network and information systems by maintaining its security posture against simulated or real attacks and that is not aware of the TLPT;
- blue team tasks
means tasks that are typically carried out by the blue team such as security operation centre (SOC), ICT infrastructure services, helpdesk services, incident management services at operational level;
- control team
means the team composed of staff of the tested financial entity and, where relevant in consideration of the scope of the TLPT, staff of its third-party service providers and any other party, who manages the test;
- control team lead
means the staff member of the financial entity responsible for the conduct of all TLPT-related activities for the financial entity in the context of a given test;
- host Member State
means the host Member State in accordance with the Union sectoral law applicable to each financial entity;
- joint TLPT
means a TLPT, other than a pooled TLPT as referred to in Article 26(4) of Regulation (EU) 2022/2554, involving several financial entities using the same ICT intra-group service provider, or belonging to the same group and sharing ICT systems.
- leg-up
means the assistance or information provided by the control team to the testers to enable the testers to continue the execution of an attack path where they are not able to advance on their own, and where no other reasonable alternative exists, including for insufficient time or resources in a given TLPT;
- pool
means all the financial entities participating in a pooled TLPT pursuant to Article 26(4) of Regulation (EU) 2022/2554;
- purple teaming
means a collaborative testing activity that involves both the testers and the blue team;
- red team
means the testers, internal or external, contracted for, or assigned to, a TLPT;
- sensitive information
means information that can readily be leveraged to carry out attacks against the ICT systems of the financial entity, intellectual property, confidential business data, or personal data, that can directly or indirectly harm the financial entity and its ecosystem would it fall in the hands of malicious actors;
- TCT
means the staff within the TLPT authorities that is responsible for TLPT-related matters;
- test managers
means staff designated to lead the activities of the TLPT authority for a specific TLPT to monitor compliance with this Regulation;
- threat intelligence provider
means the experts, contracted by the financial entity for each TLPT, and external to the financial entity and to ICT intra-group service providers if any, who collect and analyse targeted threat intelligence relevant for the financial entities in scope of a specific TLPT exercise and develop matching relevant and realistic threat scenarios;