Article 27: Requirements for testers for TLPT
Last updated: 1 authoritative sourceDORA Auditor Editorial Team
Article 27 sets requirements for the internal or external testers who conduct TLPT, covering suitability, reputation, technical capabilities, and, where external, professional indemnity insurance.
Chapter IV, Digital operational resilience testing · Pillar: Digital Resilience Testing
Key points
- Defines requirements for TLPT testers
- Covers suitability, reputation, and capability
- Requires indemnity cover for external testers
How this fits DORA
Article 27 sits within the Digital Resilience Testing pillar. For the full set of obligations and how they interlock, see the DORA requirements overview.
Read the official text
This is an editorial summary. Read the binding text of Article 27 in the consolidated regulation on EUR-Lex.