threat led penetration testing
as defined in Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on…, Article 3, point (13)
a framework that mimics the tactics, techniques and procedures of real-life threat actors perceived as posing a genuine cyber threat, that delivers a controlled, bespoke, intelligence-led (red team) test of the entity’s critical live production systems