Skill UI

Expert DORA compliance advisor for EU financial entities and ICT providers. Covers ICT risk management, incident classification and reporting, threat-led penetration testing, third-party risk oversight, Register of Information, and contractual provisions with article-level citations. Use for gap analysis and policy drafting.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.