Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

DORA Compliance Advisor

An expert advisor on the EU Digital Operational Resilience Act that answers with article-level citations and produces gap analyses, incident reporting timelines, and third-party risk artifacts.

Security & ReviewAdvanced★ 875⑂ 179AI score 9/10Last updated: Aug 30, 2026

What it does

  • Answers grounded in the full text of Regulation (EU) 2022/2554 (DORA), always citing article and paragraph: Art. 6(1) ICT risk management framework, Art. 18 incident classification criteria, Art. 30(2)(a)–(i) mandatory contractual provisions.
  • Maps each obligation to the correct adopted RTS/ITS from EBA/ESMA/EIOPA (CDR 2024/1774, CDR 2024/1772, CDR 2025/301, CIR 2025/302, CIR 2024/2956, CDR 2025/1190, CDR 2025/532 and more).
  • Uses fixed output formats per task: gap-analysis tables (Article | Obligation | Status | Evidence needed | Gap notes), the 4-hour → 72-hour → 1-month incident reporting timeline, and a Register of Information template with CIR 2024/2956 mandatory fields.
  • Encodes anti-error rules: don't conflate DORA with NIS2, don't cite the superseded EBA/GL/2019/04, keep Chapter II (proactive framework) distinct from Chapter III (reactive incident management), and treat TLPT as intelligence-led simulation rather than a standard pentest.
  • Ships four reference files: all 64 articles summarized, the RTS/ITS guide, a third-party risk deep dive, and incident classification detail.

Who it's for

  • Compliance, risk, and security teams at EU banks, payment and e-money institutions, investment firms, insurers, and MiCA CASPs.
  • GRC consultants and internal auditors running DORA readiness programmes.
  • ICT/SaaS/cloud vendors serving EU financial clients who face Art. 30 contract and audit-right demands.

Example uses

  1. "Build a Phase 1 (Chapter II) DORA gap analysis for us" → an article-by-article evidence checklist covering board approval records, ICT asset register, backup restore test logs.
  2. "Was yesterday's payment outage a major incident?" → a classification checklist against Art. 18(1)(a)–(f) and CDR 2024/1772 thresholds, plus the 4h/72h/1-month reporting schedule if it qualifies.
  3. "Review this cloud contract against Art. 30(2)" → a clause-by-clause (a)–(i) pass/fail on audit and access rights, termination and exit assistance, and subcontracting consent.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/dora/skills/dora/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/dora/skills/dora folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/dora/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills && mkdir -p ~/.claude/skills && cp -r /tmp/grc-skills/plugins/dora/skills/dora ~/.claude/skills/dora

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal and clone the skill repository: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git
  2. Create your personal skills folder if it doesn't exist: mkdir -p ~/.claude/skills
  3. Copy just the DORA skill folder (reference files included): cp -r Claude-Skills-Governance-Risk-and-Compliance/plugins/dora/skills/dora ~/.claude/skills/dora
  4. Verify with ls ~/.claude/skills/dora — you should see SKILL.md and a references/ directory.
  5. Restart Claude Code and try a prompt like "run a DORA gap analysis" to trigger the skill automatically.
  6. For real compliance work, cross-check the cited articles and RTS/ITS against EUR-Lex and confirm decisions with qualified legal counsel.
View source on GitHub ↗License: MIT