Demo
Free attack scan · then autonomous pentesting Try the free scan →
Save the date 45 minutes · Online · Free

DORA Year One —
what 12 months of TLPT enforcement revealed

A 45-minute briefing on Article 26 threat-led penetration testing: who tested what, where regulators pushed back, and what the next-year scope looks like for EU financial entities.

When
TBD Q3 2026
Date locks 4 weeks ahead. Subscribe for notice.
Format
Online live
Recorded — replay for subscribers
Who is it for
CISOs, DORA compliance leads, vCISOs and security consultants serving EU financial entities.
Save my seat → Read the DORA primer first

Agenda — 45 minutes

00:00
Article 26 — what year one actually required
Threat-led penetration testing scope, frequency, attestation: what supervisory authorities asked for vs. what the directive says.
12:00
Common findings — top 5 categories
Aggregated patterns from SQUR's engagements + public RTS-on-TLPT analysis. What financial entities reliably failed on.
22:00
Evidence chain — what auditors accepted
Report format, retest cadence, third-party-supplier attribution. How auditors decided "appropriate and proportionate."
32:00
2027 scope expansion
The implementing technical standards in the pipeline. What scope changes are likely. How early adopters position now.
40:00
Live Q&A
5 minutes of audience questions, answered live or queued for the follow-up briefing.

Why SQUR is running this

SQUR delivers autonomous pentests to EU financial entities under DORA scope — €1,995 fixed price, 24-hour turnaround, EU data residency. We see the pattern across engagements: the gap between what Article 26 says and what supervisory authorities accept as evidence.

This briefing is a one-off synthesis of that pattern, not a sales pitch. No demo. No CTA at the end. The slides ship as a PDF afterwards.

Quarterly EU compliance briefings

DORA Year One is the first in a quarterly briefing series for EU compliance leads. Upcoming:

  • ▸
    NIS2 Article 21 — the Evidence Package question
    Q4 2026. How national CSIRTs are evaluating "appropriate and proportionate measures" submissions.
  • ▸
    EU AI Act red-teaming requirements
    Q1 2027. High-risk AI system testing scope under Article 15 + 55.
  • ▸
    ISO 27001 + DORA — control-mapping gaps
    Q2 2027. Where your ISO 27001 evidence chain breaks down under DORA scrutiny.