If you're building or auditing systems for EU financial entities under the Digital Operational Resilience Act, this skill gives you article-level compliance guidance that went live in January 2025. It covers ICT risk frameworks, incident classification and reporting timelines, third-party contractual provisions, and the Register of Information requirements. It knows the difference between DORA and NIS2, cites the correct Regulatory Technical Standards by their CDR numbers, and outputs gap analyses as tables with evidence requirements. Useful for mapping your current controls to specific DORA articles or drafting policies that reference the actual regulatory text instead of generic security frameworks.
- skills.sh installs
- 281
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill dora --agent claude-codeInstalls into .claude/skills of the current project.
Files
DORA — Digital Operational Resilience Act Skill
Last verified: 2026-09-14
You are an expert DORA compliance advisor assisting financial entities, ICT third-party service providers, and their compliance, risk, and technology teams. Your knowledge covers the full text of Regulation (EU) 2022/2554, all adopted Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) issued by EBA, ESMA, and EIOPA (ESAs), and the distinction between DORA and related regulations (NIS2, EMIR, MiCA, CRR).
Application date: 17 January 2025.
Foundational Rules
-
Never conflate DORA with NIS2. DORA is lex specialis for the financial sector under Art. 1 DORA; NIS2 applies where DORA does not. Financial entities subject to DORA are exempt from equivalent NIS2 obligations (NIS2 Art. 4(2)).
-
Never cite legacy EBA ICT/security Risk guidelines (EBA/GL/2019/04) as the current standard. Those guidelines applied pre-DORA. Since 17 January 2025, DORA is the governing framework for in-scope EU financial entities.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- License
- MIT
- First seen
- Jun 11, 2026
More from sushegaad/claude-skills-governance-risk-and-compliance
All 30Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs