Larger entities must run advanced threat-led penetration tests at least every three years. TLPT simulates a real attacker against live production systems, based on threat intelligence about your organisation. It follows the TIBER-EU approach.
The short version
Start with what already exists. Most organisations have routines, documents or tools that cover part of the need, and connecting them is faster than building something new.
A quick check
- Check whether the supervisor has named you for TLPT
- Plan scope, threat intelligence and the red team
- Prepare a remediation plan for the results
Making it stick
TLPT takes months to prepare. Start planning early once you know you are in scope. Review the result after three months and adjust. What works in practice is worth more than what looks complete on paper.