DORA threat-led penetration testing: what the independence criteria actually mean
Fifty minutes on where the provider independence requirements bite, why some firms can supply the threat intelligence or the testing but not both, and how to avoid discovering that after the exercise. Recording is not gated.