TIBER and TLPT exercises aren't just compliance requirements - they are realistic assessments of an organisation’s cyber resilience and are designed to answer one critical question: how would your organisation perform against a motivated adversary?

Through intelligence-led, objective-driven threat simulations, we emulate real threat actors targeting your organisation's Critical or Important Function (CIFs). These exercises combine all-source threat intelligence, tailored attack planning, and tightly controlled red team operations, as a real attack would - from initial access to achieving target objectives.

mnemonic delivers Threat Intelligence-Based Ethical Red Teaming (TIBER) and Threat-Led Penetration Testing (TLPT) for financial institutions across the Nordics and Europe, supporting organisations through both regulatory assurance and improving resilience.

TIBER-EU is the European framework for threat intelligence-based ethical red teaming, developed by the European Central Bank. Exercises are conducted in close collaboration with national TIBER Cyber Teams (TCTs) at central banks and financial supervisory authorities.

TLPT (Threat-Led Penetration Testing) is mandated under the Digital Operational Resilience Act (DORA) for significant financial entities within the EU. TLPT builds on the TIBER-EU framework, introducing additional requirements such as mandatory purple teaming and testing every three years.

Our TIBER and TLPT engagements are delivered through a proven, intelligence-driven methodology built to meet the stringent requirements of TIBER testing. At the core of our delivery is our TIBER Operational Framework (TOF) - a mnemonic developed approach based on years of hands-on experience across complex environments and national distinctions.

The TOF translates regulatory requirements into a clear, repeatable, and efficient execution model without compromising realism or quality. Every phase of the exercise from threat intelligence and scenario development to red team operations, control, and reporting - is fully integrated and aligned with TIBER-EU and TLPT expectations.

By combining governance with intelligence-led threat simulation, our approach preserves the behaviour and intent of real adversaries while ensuring a TCT approved high-quality delivery. The result is a controlled test of cyber resilience that delivers real value to your organisation.