, especially since tiber has been embraced by 17 central banks all over europe. and even by the european colegislators, given that starting january 2025, tiber will be included in european law and will then be called tlpt : threat - led penetration testing. 2 / 4 bis - central bankers'speeches still, there was a clear need for something more, something alongside tiber or tlpt. a need that could be summarised as a need for a voluntary test framework, one that is more modular, so that it can be tailored more easily to the specific testing needs of an organisation. of your organisation. and art is our answer to this need – ready for you to use. whether you are a small or a large organisation – the former is no less important, sometimes the opposite is in fact the case. whether you have an advanced cyber security policy, or one that is more limited in terms of scale and scope. or whether you operate in the financial sector, or elsewhere – like the healthcare or the telecom sector, or the government. later today, you will get a more detailed presentation on art. this will give you the opportunity to ask all your questions – about art, tiber or tlpt. but really – with this new framework, with art, there is no reason not to test your cyber security. whether it is a very specific real - life scenario you want to test, or whether you want to use it as a stepping stone to tiber, or even to set it up as a test that goes beyond tiber. the modular set - up of art will make testing more accessible and hence increase our overall cyber resilience. and that is necessary. it is an unpleasant realisation, but actual lives are at stake in what is essentially a numbers game. a game of ones and zeros. a game of investing time and money into protecting those ones and zeros, and hence yourself and the people who rely on you – whether it's for your financial expertise, your medical care, your communication infrastructure or as their political representatives. you and i know that testing your cyber security and subsequently improving it – if and where needed – is an effective way to keep hackers out. you and i know, that it takes time and money to do so. but we also all know that your time and money are not unlimited. that is why we are launching art. a new framework we strongly believe in. a voluntary, modular

framework that was built in response to the needs of the financial sector and beyond ; one that has proven its value in pilot tests ; and one that, in the meantime, has received encouraging reactions from the ecb. i therefore want to call upon everyone here today to start using art – in whatever form suits you. to start using this state of the art framework to learn about the state of your cybersecurity, and hence, to take an improved stance in our joint fight against cyber threats. and don't shy away from spreading the word – the art we are talking about today, is not one for the few, it is one for the many. 3 / 4 bis - central bankers'speeches dear cisos, it is heart - warming to see so many of you here, today – from the financial sector, the healthcare sector, the telecom sector, and the dutch government. each one of you plays a vital role in our society – a role that becomes even more vital, the more connected we become, whether you share software, service providers, or cyber risks. maybe we'll reconvene in the future, and then there will be cake. and candles. and cards. and hopefully we will be celebrating the success of art, the success of a common cause : our fight against cyberthreats. we're not there yet, but i am confident we will get there – stronger and more resilient than ever. together, we'll protect our organisations, our people and our society. and today marks another step forward. and that alone is very much reason to celebrate. so let's celebrate! thank you. 4 / 4 bis - central bankers'speeches