The Bank of Greece and the Capital Market Commission have jointly adopted the revised European TIBER-EU framework at national level, publishing the National TIBER-GR Implementation Document.
A TIBER Test Coordination Team (TLPT Cyber Team Greece – TCT-GR), comprising staff from the two authorities, has also been set up to coordinate and support the relevant tests in the Greek financial sector.
The framework covers threat-led penetration testing (Threat-Led Penetration Testing – TLPT), in which cyberattacks are simulated against critical production systems and functions at financial institutions under real-world conditions. The aim is to identify weaknesses and strengthen the digital resilience of the sector.
TIBER-EU was developed by the European System of Central Banks, and its implementation in Greece has been designed to meet the requirements of the European DORA Regulation (2022/2554), as well as Law 5193/2025.
For financial entities within the scope of DORA that meet the eligibility criteria set out in Regulation (EU) 2025/1190, TLPT tests are a regulatory requirement.