Testing for Truth: LRQA on TLPT, AI, and Cyber Resilience

At the Operational Risk & Technology event, LRQA’s Ben Turner and Anthony Long explain how Threat-Led Penetration Testing (TLPT) is redefining the way firms test resilience. Unlike traditional assessments, TLPT is intelligence-led and conducted in live production environments, exposing weaknesses across people, processes, and technology. The approach helps organisations understand their true response capability and readiness for real-world incidents, not just technical vulnerabilities.

They also explore the growing intersection between AI and cyber resilience—how attackers are using artificial intelligence to increase sophistication, and how defenders must respond in kind. As regulatory frameworks evolve and converge globally, Turner and Long highlight the importance of collaboration, cross-border testing, and shared learning. For LRQA, TLPT represents a shift from compliance to proactive assurance, enabling firms to strengthen their defences through insight, not assumption.