third-party-risk-register
Build and maintain the ICT third-party risk register (DORA register of information templates B_01 to B_07 with LEI, contract reference, function criticality, substitutability, exit strategy, sub-contracting, data location), tier vendors (critical, important, standard), judge due diligence evidence (SOC 2 Type II, ISO 27001 scope, pentest, RGPD art. 28 DPA, BCP/DR, cyber insurance), check contract clauses (audit rights, 24h incident notification, SLA, termination assistance), measure concentration risk, track provider incidents and ratings (SecurityScorecard, BitSight), compute review dates.
When to use
Use when the user asks to "build the DORA register", "assess this vendor", "which contracts expire soon", "check our supplier concentration", "review the vendor contract clauses", or shares a supplier list or SOC 2 report. In French "registre des prestataires", "risque fournisseur", "plan de sortie".
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | third-party-risk-register |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/third-party-risk-register/SKILL.md |
| Digest | sha256:5fda35c4a5c36f5902b012d9896b60c0e48f0b7859f29eae0b6e74a697001d9c |
skill_md_digest | sha256:934ea36d56ed874275d2b011628477068bc2f29831665d7f5436721c3a5c2d2f |
| Emoji | 🤝 |
Bundled files
| Path | Count |
|---|---|
catalog/navin/skills/third-party-risk-register/examples | 2 |
catalog/navin/skills/third-party-risk-register/references | 3 |
catalog/navin/skills/third-party-risk-register/scripts | 2 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | third-party-risk-register |
description | Build and maintain the ICT third-party risk register (DORA register of information templates B_01 to B_07 with LEI, contract reference, function criticality, substitutability, exit strategy, sub-contracting, data location), tier vendors (critical, important, standard), judge due diligence evidence (SOC 2 Type II, ISO 27001 scope, pentest, RGPD art. 28 DPA, BCP/DR, cyber insurance), check contract clauses (audit rights, 24h incident notification, SLA, termination assistance), measure concentration risk, track provider incidents and ratings (SecurityScorecard, BitSight), compute review dates. Use when the user asks to "build the DORA register", "assess this vendor", "which contracts expire soon", "check our supplier concentration", "review the vendor contract clauses", or shares a supplier list or SOC 2 report. In French "registre des prestataires", "risque fournisseur", "plan de sortie". |
metadata.navin.emoji | 🤝 |
metadata.navin.category | security |