Pen tests & red teaming are now mandatory. Our guide maps ISO, PCI DSS, DORA & NIS2 so you know what’s required — and how often.