<aside>
Free preview of the EU Compliance Workspace. 3 databases, 13 sample records, pre-populated with a realistic mid-size bank scenario. Duplicate, replace with your data, start managing compliance immediately.
Want the full system? Get all 8 databases, 40+ views, DORA/NIS2 incident templates, Vendor Art. 30 tracking and annual regulatory updates at altshift.me
</aside>
| Database | What it tracks |
|---|---|
| Compliance Requirements | DORA · NIS2 · EU AI Act requirements — gap tracking per article |
| Risk Register | ICT and operational risks with likelihood × impact scoring |
| Controls Catalogue | Security controls linked to requirements and risks |
| Documentation & User Guide | Setup guide and how to use this workspace |
| Indicator | Value | Status |
|---|---|---|
| Requirements monitored | 5 | — |
| Requirements with Gap | 3 | Critical |
| Requirements Partial | 2 | In progress |
| Open Critical Risks | 3 | Critical |
| Controls Implemented | 2 / 5 | Partial |
Top 3 priority actions — sample scenario:
This workspace implements the Eramba GRC methodology: every compliance requirement (problem) is linked to the controls that address it (solution). The three-database core structure:
Compliance Requirements ↔ Controls Catalogue ↔ Risk Register
The full EU Compliance Workspace extends this to 8 databases with complete bidirectional relations across incidents, audits, policies, vendors and AI systems.
| Regulation | Scope | In Force | Key Deadlines |
|---|---|---|---|
| DORA | Financial entities + critical ICT providers | 17 Jan 2025 | Incident reporting: 4h / 72h / 1 month |
| NIS2 | 18 essential and important sectors | Oct 2024 | Reporting: 24h / 72h · Penalties up to €10M |
| EU AI Act | Any org developing or deploying AI in the EU | 2024–2028 (phased) | High-Risk registration mandatory |