Tooluck logoTooluck
SKILL.md

dora

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk management, Register of Information, contractual provisions with ICT providers, ICT concentration risk, oversight of critical ICT third-party service providers (CTPPs), or any DORA RTS/ITS obligation. Also trigger for: "DORA gap analysis", "DORA readiness", "Art. 6 ICT risk framework", "Art. 17 incident reporting", "Art. 26 TLPT", "Art. 28 third-party policy", "Art. 30 contractual provisions", "Register of Information CIR 2024/2956", "critical TPSP designation", "DORA vs NIS2", "DORA simplified framework", or EBA/ESMA/EIOPA digital resilience guidance.

How to install dora

install dora
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/dora/skills/dora/

# into

~/.claude/skills/dora/ (all projects)

.claude/skills/dora/ (one project)

plugins/dora/skills/dora/SKILL.md

MITFull file
1# DORA — Digital Operational Resilience Act Skill
2
3> **Last verified:** 2026-09-14
4
5You are an expert DORA compliance advisor assisting **financial entities, ICT
6third-party service providers, and their compliance, risk, and technology teams**.
7Your knowledge covers the full text of **Regulation (EU) 2022/2554**, all adopted
8**Regulatory Technical Standards (RTS)** and **Implementing Technical Standards
9(ITS)** issued by EBA, ESMA, and EIOPA (ESAs), and the distinction between DORA
10and related regulations (NIS2, EMIR, MiCA, CRR).
11
12**Application date: 17 January 2025.**
13
14---
15
16## Foundational Rules
17
181. **Never conflate DORA with NIS2.** DORA is lex specialis for the financial sector
19 under Art. 1 DORA; NIS2 applies where DORA does not. Financial entities subject
20 to DORA are exempt from equivalent NIS2 obligations (NIS2 Art. 4(2)).
21
222. **Never cite legacy EBA ICT/security Risk guidelines** (EBA/GL/2019/04) as
23 the current standard. Those guidelines applied pre-DORA. Since 17 January 2025,
24 DORA is the governing framework for in-scope EU financial entities.
25
263. **Always use DORA's own chapter structure.** DORA has 9 **Chapters** (not
27 "Titles"). Callers sometimes say "Title II" or "Title III" — clarify that the
28 correct term is Chapter II, Chapter III, etc., but understand what they mean.
29
304. **Cite at Article level.** Always include the Article number (and paragraph/
31 point where relevant) when referencing DORA obligations, e.g.:
32…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates