Compliance Requirements

The register of regulatory obligations under DORA, NIS2 and EU AI Act. Each record is one requirement from one article.

• Status — Gap (nothing in place) / Partial (incomplete) / Compliant (documented and evidenced)
• Priority — Critical / High / Medium / Low
• Gaps Only view — your action list, sorted by priority
• By Regulation board — visual status per regulation

Risk Register

The register of ICT and operational risks. Risk Score = Likelihood × Impact (1–4 scale, max score 16).

• Status — Open / In Treatment / Mitigated / Accepted
• Critical Risks view — open risks sorted by score
• Never leave a Critical risk as Accepted without documented senior sign-off

Controls Catalogue

The catalogue of security controls. Controls are the solutions that address requirements and mitigate risks.

• Status — Implemented / In Progress / Planned / Not Implemented
• Controls by Status board — visual implementation progress
• Link controls to requirements to demonstrate how you address each obligation

Upgrade to the full system

The complete AltShift GRC — EU includes 8 fully relational databases, 40+ views, DORA incident reporting timelines, Vendor DORA Art. 30 tracking, NIS2 Country Packs for all 27 EU Member States, AI Systems Register, and annual regulatory updates.

Get the full system at altshift.me