diff --git a/dv/uvm/core_ibex/riscv_dv_extension/ibex_directed_instr_lib.sv b/dv/uvm/core_ibex/riscv_dv_extension/ibex_directed_instr_lib.sv
index 33f45e1e..56960957 100644
--- a/dv/uvm/core_ibex/riscv_dv_extension/ibex_directed_instr_lib.sv
+++ b/dv/uvm/core_ibex/riscv_dv_extension/ibex_directed_instr_lib.sv
@@ -61,3 +61,28 @@ class ibex_breakpoint_stream extends riscv_directed_instr_stream;
   endfunction
 
 endclass
+
+// Define a short riscv-dv directed instruction stream to write random values to MSECCFG CSR
+class ibex_rand_mseccfg_stream extends riscv_directed_instr_stream;
+
+  `uvm_object_utils(ibex_rand_mseccfg_stream)
+
+  function new(string name = "");
+    super.new(name);
+  endfunction
+
+  function void post_randomize();
+    riscv_instr          csrrw_instr;
+    // This stream consists of a single instruction
+    initialize_instr_list(1);
+
+    csrrw_instr = riscv_instr::get_instr(CSRRWI);
+    csrrw_instr.atomic = 1'b0;
+    csrrw_instr.csr = MSECCFG;
+    csrrw_instr.rd = '0;
+    // Randomize between 3'b000 and 3'b111 to hit every combination of RLB/MMWP/MML bits.
+    csrrw_instr.imm_str = $sformatf("0x%0x", $urandom_range(7,0));
+    instr_list = {csrrw_instr};
+  endfunction
+
+endclass
diff --git a/dv/uvm/core_ibex/riscv_dv_extension/testlist.yaml b/dv/uvm/core_ibex/riscv_dv_extension/testlist.yaml
index 5d96516f..b5d1dc3d 100644
--- a/dv/uvm/core_ibex/riscv_dv_extension/testlist.yaml
+++ b/dv/uvm/core_ibex/riscv_dv_extension/testlist.yaml
@@ -794,6 +794,7 @@
     +directed_instr_1=riscv_load_store_hazard_instr_stream,40
     +directed_instr_2=riscv_multi_page_load_store_instr_stream,40
     +directed_instr_3=riscv_load_store_rand_addr_instr_stream,40
+    +directed_instr_4=ibex_rand_mseccfg_stream,10
   sim_opts: >
     +is_double_fault_detected_fatal=0
     +enable_bad_intg_on_uninit_access=0