NIS2
NIS2 Penetration Testing Requirements
If you are reading this, the news has already reached you: NIS2 is in force, your organisation falls within scope, and one of the obligations being interpreted across every member state is regular penetration testing. The Directive itself never says the words "penetration test" but Article 21(2)