Skill UI

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

An expert advisory tool for navigating the EU NIS2 Directive (Directive (EU) 2022/2555) compliance requirements. It provides deep analysis on entity classification (Essential vs. Important), governance obligations (Art. 20), risk management gap assessments (Art. 21), and incident reporting timelines (Art. 23). Use it for organizational readiness, policy drafting, and alignment with standards like ISO 27001 and DORA across critical and essential digital infrastructure sectors.

A comprehensive guide designed to assess organizational compliance with the NIS2 Directive (EU 2022/2555). It guides users through scope determination, Art. 21 gap analysis across multiple risk management measures, and creates a prioritized compliance roadmap. Supports EU directives and deep national transpositions, including Germany (BSIG-neu) and profiles for other member states.

This advanced skill performs server-enforced security and privacy reviews for applications, including those rapidly developed with AI agents. It implements comprehensive models like STRIDE (security) and LINDDUN (privacy), screens dependencies against live CVE/CISA data, and evaluates applicability of major EU regulations (GDPR, AI Act, NIS2). The output is a formal, auditable compliance report, never a simulated chat response or legal verdict.

This skill guides the assessment and drafting of Serious Incident Reports (SIR) required under Article 73 of the EU AI Act. It helps legal, compliance, and product teams determine if an AI failure or adverse event qualifies as a reportable serious incident. The process covers scoping, deadline assessment (2/10/15 days), identifying relevant market surveillance authorities, and cross-mapping obligations with regulations like GDPR, NIS2, and MDR. Use it to create comprehensive incident playbooks and actionable compliance memos.

A comprehensive, risk-based framework for assessing third-party vendors, critical for compliance with global regulations like DORA, NIS2, and GDPR. It provides a structured, three-phase process covering financial, legal, security, and operational risks. Ideal for vendor onboarding, supply chain security audits, and ongoing vendor monitoring in regulated industries.