ZARZA We are Zarza, the prestigious firm behind major projects in information technology.
Listen "Ep. 36 - TIBER-EU Explained: How Threat-Led Red Teaming Is Redefining Cyber Resilience"
Episode Synopsis
Threat-led red teaming is no longer optional in Europe — it’s becoming the foundation of cyber resilience.
In this episode of The Cyber Resilience Brief, host Tova Dvorin is joined by Adrian Culley, SafeBreach’s offensive security expert for Europe and the UK, to break down the TIBER-EU framework and why it’s reshaping how financial institutions and critical infrastructure organizations approach cyber defense.
Originally developed by the European Central Bank, TIBER-EU (Threat Intelligence-Based Ethical Red Teaming) goes far beyond traditional penetration testing. It simulates real-world adversaries, real attack paths, and real operational pressure — aligning tightly with modern regulations such as DORA, NIS2, and the EU Cyber Resilience Act.
In this episode, we cover:
What TIBER-EU is and why regulators are embracing intelligence-led red teaming
How DORA and TIBER-EU work together to enforce continuous operational resilience
Why point-in-time penetration tests are no longer enough
The evolving role of Breach & Attack Simulation (BAS) in preparing for TIBER-EU assessments
How Adversary Exposure Validation (AEV) reveals real blast radius and business impact
Why Continuous Automated Red Teaming (CART) is emerging as the “always-on” complement to regulator-mandated tests
Whether you’re a CISO, security architect, red teamer, or risk leader, this episode explains how Europe’s regulatory frameworks are pushing the industry toward continuous, adversary-centric security validation — and why organizations outside the EU should be paying close attention.
🎙️ If cyber resilience is a journey — TIBER-EU defines the terrain.
In this episode of The Cyber Resilience Brief, host Tova Dvorin is joined by Adrian Culley, SafeBreach’s offensive security expert for Europe and the UK, to break down the TIBER-EU framework and why it’s reshaping how financial institutions and critical infrastructure organizations approach cyber defense.
Originally developed by the European Central Bank, TIBER-EU (Threat Intelligence-Based Ethical Red Teaming) goes far beyond traditional penetration testing. It simulates real-world adversaries, real attack paths, and real operational pressure — aligning tightly with modern regulations such as DORA, NIS2, and the EU Cyber Resilience Act.
In this episode, we cover:
What TIBER-EU is and why regulators are embracing intelligence-led red teaming
How DORA and TIBER-EU work together to enforce continuous operational resilience
Why point-in-time penetration tests are no longer enough
The evolving role of Breach & Attack Simulation (BAS) in preparing for TIBER-EU assessments
How Adversary Exposure Validation (AEV) reveals real blast radius and business impact
Why Continuous Automated Red Teaming (CART) is emerging as the “always-on” complement to regulator-mandated tests
Whether you’re a CISO, security architect, red teamer, or risk leader, this episode explains how Europe’s regulatory frameworks are pushing the industry toward continuous, adversary-centric security validation — and why organizations outside the EU should be paying close attention.
🎙️ If cyber resilience is a journey — TIBER-EU defines the terrain.
In God we trust