Dora

If you're building or auditing systems for EU financial entities under the Digital Operational Resilience Act, this skill gives you article-level compliance guidance that went live in January 2025. It covers ICT risk frameworks, incident classification and reporting timelines, third-party contractual provisions, and the Register of Information requirements. It knows the difference between DORA and NIS2, cites the correct Regulatory Technical Standards by their CDR numbers, and outputs gap analyses as tables with evidence requirements. Useful for mapping your current controls to specific DORA articles or drafting policies that reference the actual regulatory text instead of generic security frameworks.

Install to Claude Code

npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill dora --agent claude-code