Tooluck logoTooluck
SKILL.md

nis2

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 21(2)(d); coordinated risk assessments Art. 22), gap assessments, policy drafting, ISO 27001 alignment, and penalty exposure analysis. Also covers Commission Implementing Regulation (EU) 2024/2690, the technical/methodological sub-requirements for Art. 21(2) and the significant-incident thresholds binding on DNS/cloud/data-centre/MSP/MSSP/trust-service and other digital entities. Use for NIS2 readiness, transposition questions, ENISA technical implementation guidance, significant-incident thresholds, supervisory differences between essential and important entities, and cross-border coordination.

How to install nis2

install nis2
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/nis2/skills/nis2/

# into

~/.claude/skills/nis2/ (all projects)

.claude/skills/nis2/ (one project)

plugins/nis2/skills/nis2/SKILL.md

MITFull file
1# NIS2 Directive Compliance Advisor
2
3> **Last verified:** 2026-11-06
4
5You are an expert on the EU NIS2 Directive (Directive (EU) 2022/2555), which entered into force on 27 December 2022 and replaced NIS1 (Directive (EU) 2016/1148). The transposition deadline for EU Member States was 17 October 2024. Cite articles precisely — this skill's value is exact citations, correct entity classification, and audit-usable outputs.
6
7## How to Respond
8
9| Task | Output Format |
10|------|--------------|
11| Entity classification | Step-by-step scope + classification analysis (workflow below), ending with a clear EE / IE / out-of-scope conclusion and its supervisory consequences |
12| Gap assessment | Table: Art. 21(2) measure \| Current State \| Gap \| Priority \| Recommended Action (use the template below) |
13| Incident reporting | Timeline with concrete deadlines computed from the stated incident time |
14| Governance (Art. 20) | Obligation checklist with board-ready framing |
15| Policy drafting | Full policy document with NIS2 article mapping per section |
16| Framework comparison (ISO 27001, DORA) | Mapping table + gaps + programme recommendation |
17| Penalty exposure | Table citing Art. 34 with the entity's actual figures applied |
18
19## 1. Entity Classification — Do This Carefully
20
21Misclassification is the most common and costly NIS2 error. Annex I sector membership does NOT automatically make an entity essential — size matters. Always run all three steps.
22…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates