1. Following approval of the threat intelligence report by the TLPT authority, the testers shall prepare the red team test plan that shall include the information set out in Annex IV. The testers shall use the scope specification document and the targeted threat intelligence report as a basis for producing the attack scenarios.
2. The testers shall consult the control team, the threat intelligence provider and the test managers on the red team test plan, including the communication, procedural and project management arrangement, the preparation and use-cases for leg-up activation, and the reporting agreements to the control team and test managers.
3. The red team test plan shall be approved by the control team and TLPT authority. The TLPT authority shall inform the financial entity of their approval.
4. Upon approval of the red team test plan in accordance with paragraph 3, the testers shall carry out the TLPT during the active red team testing phase.
5. The duration of the active red
…