Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+21 more

    dora ict register audit

    1

    Audits DORA ICT registers and contracts for template integrity, missing arrangements, and Article 30 clause compliance.

    $19

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    dora ict register audit

    dora ict register audit

    Example session with this skill installed

    Audit our ICT register export and these three vendor contracts for DORA Article 30 compliance. We have marked the AWS arrangement as supporting a critical function.

    • Read your context and instructions
    • Compiled the dora ict register

    Register Audit: 2 broken references found (Provider ID P-09 lacks LEI in Provider Template).
    Contract Audit: AWS contract lacks the Article 30(3) 'unrestricted audit rights' clause despite being marked critical. Two legacy contracts (signed 2023) lack mandatory insolvency data return clauses.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    The problem

    EU financial entities face severe regulatory risk if their ICT registers are incomplete or internally inconsistent. Most firms struggle with "shadow SaaS" bought outside IT and legacy contracts that lack mandatory DORA clauses, leading to failed ESA submissions.

    What it does

    • Audits the register of information for relational integrity across all 15 ITS templates to find broken cross-references.
    • Identifies missing arrangements, including sub-outsourcers, intra-group providers, and SaaS tools procured outside formal IT channels.
    • Maps ICT contracts against Article 30 mandatory clause requirements, distinguishing between standard and critical/important functions.
    • Flags legacy contracts signed before 2025-01-17 that require remediation to meet current standards.
    • Verifies that the entity's own critical/important function determinations are documented and correctly reflected in the contract set.

    Why this beats prompting it yourself

    General LLMs treat registers as flat lists rather than the complex relational models required by ITS 2024/2956. This skill enforces the specific cross-template reconciliation logic that supervisors use to find failures, and it prevents the common mistake of assuming pre-2025 contracts are grandfathered.

    Use cases

    • Reviewing a draft register before the annual April ESA submission deadline.
    • Conducting a gap analysis on legacy ICT contract portfolios to prioritize legal remediation.
    • Verifying relational integrity between provider tables and supported function templates.
    • Cross-checking internal "critical or important" determinations against required 30(3) enhanced clauses.

    Known limitations

    This skill cannot make binding critical/important function determinations or certify full DORA compliance. It does not cover the incident reporting, resilience testing, or governance pillars.

    Cannot make binding "critical or important" determinations or certify compliance. Excludes incident reporting, resilience testing, and governance pillars. Point-in-time audit only.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before any payment.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 3 months ago

    Permissions

    No special permissions declared or detected

    Listed3 months ago

    What's inside

    Frequently Asked Questions

    This skill automates the validation of ICT registers against ESA ITS templates, specifically identifying broken cross-references, missing sub-outsourcers, and non-compliance with Article 30 mandatory contract clauses.

    The skill is designed to work with structured data (CSV/XLSX) and PDF contract documents; it is compatible with most enterprise-grade AI agents that support multi-file analysis and large contexts.

    Unlike general prompting, this skill uses specialized logic to map relations across all 15 ITS templates and specifically checks for legacy contract remediation requirements that common LLMs often overlook.

    No complex setup is required; once added to your agent's workspace, you simply upload your ICT register templates and contract set to begin the gap analysis.

    You receive the core audit skill, a guide on preparing your register data for the best results, and access to logic updates as European Supervisory Authorities (ESAs) refine their reporting standards.

    The skill identifies missing clauses for both standard and critical/important functions, ensuring that contracts signed before January 2025 are flagged for the required DORA remediation.

    New in Legal & Compliance