[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-202968-105":59,"doc-detail-202968-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","tiber-es-implementation-guide-threat-intelligence-based-ethical-red-teaming-spain","Guía de implementación TIBER-ES: Threat Intelligence Based Ethical Red-Teaming-Spain","","The guide defines and explains the TIBER-ES threat intelligence based ethical red-teaming framework for advanced cyber security testing in Spain. It outlines the background and relationship with TIBER-EU, introduces the overall testing process from preparation to closure, and describes stakeholder roles including authorities, participants and providers. It also addresses risk management and explains how test results are used for financial supervision and oversight. The annex provides a responsibility matrix to support governance and execution.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/tiber-es-implementation-guide-threat-intelligence-based-ethical-red-teaming-spain/202968/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/tiber-es-implementation-guide-threat-intelligence-based-ethical-red-teaming-spain/202968.png","ImageObject",300,407,{"name":92,"@type":93},"Ethan Miller","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-13","2026-09-04",true,{"@type":102,"interactionType":103,"userInteractionCount":52},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What is TIBER-ES and what is it intended to achieve?","Question",{"text":112,"@type":113},"TIBER-ES is an intelligence-led ethical red-teaming testing framework. It aims to help entities identify weaknesses and strengths in cyber resilience and define measures to enhance resilience when facing a realistic cyber attack.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Who are the main stakeholders in a TIBER-ES test?",{"text":117,"@type":113},"Stakeholders include participant authorities, the TIBER Cyber Team, the entity being tested, and external providers. Their roles support planning, execution, and alignment with the framework requirements.",{"name":119,"@type":110,"acceptedAnswer":120},"How does the TIBER-ES test process work from start to finish?",{"text":121,"@type":113},"The process follows preparation, testing, and closure stages. This structure supports effective execution of simulated attacks and subsequent use of outcomes.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},202968,1788552968,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":52,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":129,"read_time":144},687207017582,"https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","TIBER-ES IMPLEMENTATION GUIDE Threat Intelligence Based Ethical Red-Teaming-Spain  \nTIBER-ES IMPLEMENTATION GUIDE  \nThreat Intelligence Based Ethical Red-Teaming-Spain  \nTIBER-ES IMPLEMENTATION GUIDE  \nThreat Intelligence Based Ethical Red-Teaming-Spain  \nContents  \nAbbreviations 5  \n1 Introduction 5  \n1.1 Background 5  \n1.2 What is TIBER-EU? 6  \n1.3 What is TIBER-ES? 7  \n1.4 Purpose of this guide 7  \n1.5 Introduction to the TIBER-ES process 8  \n1.6 Who is eligible for this type of testing? 8  \n2 Stakeholders and their roles 10  \n2.1 The role of participant authorities 10  \n2.2 Participants 10  \n2.2.1 TIBER Cyber Team 10  \n2.2.2 Entity being tested 11  \n2.2.3 Providers 11  \n3 The TIBER-ES test process 13  \n3.1 Preparation 13  \n3.2 Testing 16  \n3.3 Closure 19  \n4 Risk management 22  \n5 Test results and their use in financial supervision and oversight 23  \nAnnex Responsibility matrix 24  \n5  \nTIBER-ES IMPLEMENTATION GUIDE Threat Intelligence Based Ethical Red-Teaming-Spain  \nAbbreviations  \nBT  \nBTTR  \nGTL  \nRT  \nRTTR  \nTCT  \nTI  \nTKC  \nTLPT  \nTTI  \nTTM  \nTTP  \nWT  \nWTL  \nBlue Team  \nBlue Team Test Report Generic Threat Landscape Red Team  \nRed Team Test Report TIBER Cyber Team Threat Intelligence  \nTIBER-EU Knowledge Centre Threat Led Penetration Testing Targeted Threat Intelligence Team Test Manager  \nTactics, Techniques and Procedures White Team  \nWhite Team Lead  \n1 Introduction  \nTechnology is a key element in allowing financial institutions1 to offer their services in a reliable and safe way that is consistent with their strategy and business model. Factors such as the high level of interconnectedness within the financial sector and with third parties, the continuous and rapid development of technology, the growing number and sophistication of cyber threats, the digitalisation of financial transactions and remote working have made entities’ cyber resilience and cyber security a priority both from prudential and financial stability angles.  \nIn this setting, entities’ most vulnerable points may be subject to attacks that can sometimes be highly complex. Therefore, it is paramount that entities reduce their vulnerabilities and have in place an effective and mature cyber security control environment. However, this approach will only be successful if it allows them to effectively confront a real cyber attack.  \nIn that sense, Threat Led Penetration Testing (TLPT) or intelligence-led red teaming tests aim to anticipate, insofar as possible, the impact that a real cyber attack could have on an entity. In order to do so, in this type of advanced cyber security testing, cyber attacks are simulated using the Tactics, Techniques and Procedures (TTP) that a sophisticated attacker would use. Accordingly, these tests constitute a very powerful tool to improve entities’ cyber resilience.  \n1.1 Background  \nIn 2016 the Bank of England published the first red teaming framework for the financial sector, CBEST.2 In the same vein, in 2017 the Netherlands published the TIBER-NL3 (Threat Intelligence  \n1 For the purposes of this guide, the term “entity” will be used for simplicity, referring not only to any entity, institution or organisation that provides financial services to clients or members but also to the financial market infrastructures needed to provide those services.  \n2 [https://www.bankofengland.co.uk/-/media/boe/files/financial-stability/financial-sector-continuity/cbest-implementation-guide](https://www.bankofengland.co.uk/-/media/boe/files/financial-stability/financial-sector-continuity/cbest-implementation-guide).  \n3 [https://www.dnb.nl/media/1mdf3lmq/tiber-nl-guide.pdf](https://www.dnb.nl/media/1mdf3lmq/tiber-nl-guide.pdf).  \nBased Ethical Red-teaming) framework, drawing on CBEST but with its own characteristics. Different jurisdictions around the world have also expressed their intention to develop local red teaming testing frameworks.  \nIn this setting, in May 2018 the European Central Bank (ECB) published TIBER-EU, its ow","cbCaidCbAwPQzcfc","https://ap.wps.com/l/cbCaidCbAwPQzcfc","pdf",687591,26,"English","# Contents\n## Abbreviations\n## 1 Introduction\n### 1.1 Background\n### 1.2 What is TIBER-EU?\n### 1.3 What is TIBER-ES?\n### 1.4 Purpose of this guide\n### 1.5 Introduction to the TIBER-ES process\n### 1.6 Who is eligible for this type of testing?\n## 2 Stakeholders and their roles\n### 2.1 The role of participant authorities\n### 2.2 Participants\n### 2.2.1 TIBER Cyber Team\n### 2.2.2 Entity being tested\n### 2.2.3 Providers\n## 3 The TIBER-ES test process\n### 3.1 Preparation\n### 3.2 Testing\n### 3.3 Closure\n## 4 Risk management\n## 5 Test results and their use in financial supervision and oversight\n## Annex Responsibility matrix","[{\"question\":\"What is TIBER-ES and what is it intended to achieve?\",\"answer\":\"TIBER-ES is an intelligence-led ethical red-teaming testing framework. It aims to help entities identify weaknesses and strengths in cyber resilience and define measures to enhance resilience when facing a realistic cyber attack.\"},{\"question\":\"Who are the main stakeholders in a TIBER-ES test?\",\"answer\":\"Stakeholders include participant authorities, the TIBER Cyber Team, the entity being tested, and external providers. Their roles support planning, execution, and alignment with the framework requirements.\"},{\"question\":\"How does the TIBER-ES test process work from start to finish?\",\"answer\":\"The process follows preparation, testing, and closure stages. This structure supports effective execution of simulated attacks and subsequent use of outcomes.\"}]","Guía de implementación TIBER-ES: Threat Intelligence Based Ethical Red-Teaming-Spain | PDF",66]