EBA Guidelines on the Sound Management of Third-Party Risk Regarding Non-ICT Services

ICT Risk: Focus on Thread-Led Penetration Testing (TLPT)