Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

DORA Compliance Advisor (EU Digital Operational Resilience Act)

An expert skill for DORA (Regulation (EU) 2022/2554): article-level gap analysis, ICT incident classification and reporting, third-party risk, and TLPT scoping.

Security & ReviewAdvanced★ 950⑂ 183AI score 9/10Last updated: Oct 10, 2026

What it does

  • Maps the entire DORA structure (Chapters I–IX, Articles 1–64) and always cites at Article/paragraph level.
  • Produces gap-analysis tables across four phases — governance (Ch. II), incident management (Ch. III), resilience testing (Ch. IV), third-party risk (Ch. V) — with required evidence and typical findings.
  • Handles incident classification and reporting: Art. 18 criteria, CDR (EU) 2024/1772 materiality thresholds, and the three-stage Art. 19 clock (initial 4h → intermediate 72h → final 1 month) with CIR (EU) 2025/302 templates.
  • Covers ICT third-party risk: Register of Information mandatory fields (CIR (EU) 2024/2956), Art. 30(2)(a)–(i) contractual checklist, concentration risk and exit strategies, CTPP oversight (Art. 31–44).
  • Guides TLPT scoping per Art. 26 + CDR (EU) 2025/1190, including the 7-step process and 3-year cadence, and its relationship to TIBER-EU.
  • Built-in guardrails against common errors: never conflating DORA with NIS2, never citing the superseded EBA/GL/2019/04.

Who it's for

  • Compliance, risk and CISO teams at EU banks, payment/e-money institutions, investment firms, insurers, CSDs/CCPs and MiCA CASPs.
  • Cloud and SaaS vendors serving EU financial clients who must meet DORA contractual and oversight expectations.
  • GRC consultants, internal audit and legal teams running DORA readiness assessments.

Examples

  1. "Run a DORA gap analysis for our e-money institution focused on Chapter II" → table of Art. 5–14 obligations, evidence needed, and likely gaps.
  2. "Ransomware caused a 6-hour payment outage affecting 120,000 clients — is this a major incident and what's the reporting timeline?" → Art. 18 classification checklist plus a 4h/72h/1-month reporting schedule.
  3. "Review our existing cloud contract against Art. 30(2)" → clause-by-clause (a)–(i) assessment flagging missing audit and exit rights.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/dora/skills/dora/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/dora/skills/dora folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/dora/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills && mkdir -p ~/.claude/skills && cp -r /tmp/grc-skills/plugins/dora/skills/dora ~/.claude/skills/dora

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal (Terminal on macOS/Linux, Git Bash or WSL on Windows).
  2. Clone the repository: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill into place: cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/dora/skills/dora ~/.claude/skills/dora
  5. Verify with ls ~/.claude/skills/dora — you should see SKILL.md and a references/ folder.
  6. Restart Claude Code and ask something like "Do a DORA readiness gap analysis" to trigger the skill.
  7. Regulatory status changes over time: re-verify any output against EUR-Lex and current EBA/ESMA/EIOPA publications before relying on it for filings.
View source on GitHub ↗License: MIT