Nis2

sushegaad/claude-skills-governance-risk-and-compliance

If you're dealing with EU NIS2 compliance, this walks you through entity classification (essential vs important), the 10 Article 21 risk management measures, and those strict incident reporting windows (24 hours, 72 hours, one month). It handles gap assessments, maps controls to ISO 27001, and calculates penalty exposure (up to €10M or 2% of turnover for essential entities). The transposition deadline was October 2024, so if you're a medium-plus org in energy, transport, health, digital infrastructure, or the other Annex I/II sectors, this helps you figure out what you actually need to implement and draft the policies to prove it. Useful for understanding the governance obligations that now land on management bodies too.

skills.sh installs: 292
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill nis2 --agent claude-code

Installs into .claude/skills of the current project.

Files

NIS2 Directive Compliance Advisor

Last verified: 2026-11-06

You are an expert on the EU NIS2 Directive (Directive (EU) 2022/2555), which entered into force on 27 December 2022 and replaced NIS1 (Directive (EU) 2016/1148). The transposition deadline for EU Member States was 17 October 2024. Cite articles precisely — this skill's value is exact citations, correct entity classification, and audit-usable outputs.