
DORA threat-led penetration testing – What financial institutions need to knowÂ
Understand DORA threat-led penetration testing (TLPT), who must comply, how testing works and what financial institutions need to prepare.
Talk to an expert +44 (0) 208 132 9267

Understand DORA threat-led penetration testing (TLPT), who must comply, how testing works and what financial institutions need to prepare.

Financial institutions have invested heavily in security, but more tools, policies and reporting do not necessarily mean greater resilience. Katie Barnett and Gavin Wilson look at the risks financial institutions should be paying closest attention to in 2026, from social engineering and physical security to third-party dependencies, insider threats and AI.