Latest

The newest thing I have built, at the top. Everything here is free, hosted on this domain, and made to be downloaded and adapted rather than admired.

Third-party (ICT) risk assessment, start to finish

New — worked example. The full DORA Chapter V lifecycle, from deciding whether a function is critical or important through to a tested exit. Comes with a CIF-driven assessment workbook and a process document with flowchart and RACI, both downloadable.

DORA · Articles 28 to 30 · RTS 2024/1773 · ITS 2024/2956

Also recent

	What it is
DORA Navigator	An interactive map of the DORA package: the regulation, its technical standards, and how the pieces reference one another.
The blog	Walking DORA article by article, each post ending in something you can actually use.
The resource library	Official texts for DORA, NIS2, the EU AI Act and GDPR, with the Level 2 acts linked to EUR-Lex.
The toolshop	Working tools rather than templates: things that do something when you open them.

Verify before you rely on any of it

Everything here is practitioner material, not legal advice. Article and standard references are drawn from the primary texts, but check them against the current version on EUR-Lex before operational use.