(17)For the purposes of the comprehensive management of operational risks and in view of the increasing deployment and use of technological means in the operation of a SIPS, as well as the increased threat from cyber attacks and damage that a successful cyber attack could cause to the functioning of a SIPS, a SIPS operator should have in place a cyber resilience strategy and framework with adequate procedures, processes and controls to manage cyber risk effectively and ensure a high level of cyber resilience. The requirements relating to such a cyber resilience strategy and framework should be based on the Cyber resilience oversight expectations for financial market infrastructures 4 with the purpose of rendering some key expectations legally binding for SIPS operators. Moreover, it is essential that a SIPS operator periodically tests the effectiveness of the SIPS controls and systems by performing threat led penetration testing in accordance with the European Framework for Threat Intelligence-based Ethical Red Teaming (TIBER-EU) 5 (hereinafter the ‘TIBER-EU framework’). Where a SIPS operator is a branch, the competent authority may accept testing performed by the legal entity of which the branch is a legally dependent part, if it can be deemed a comparable exercise to a TIBER-EU test, and if it captures also the effectiveness of the branch’s relevant controls and systems.