{
      "name": "dora-third-party-ict-risk",
      "domain": "DORA / NIS2 / ICT Resilience",
      "title": "DORA Third-Party ICT Risk",
      "description": "DORA ROI structure builder > DORA CIF identifier > DORA third-party contract checker > NIS2/DORA overlap mapper: composite DORA third-party ICT risk mandate.",
      "composer_url": "https://ainumbers.co/chaingraph/chains/dora-third-party-ict-risk.html",
      "steps": [
        {
          "tool_id": "301-dora-roi-structure-builder",
          "handoff": "ict_roi_framework and cost_benefit feed Stage 2 CIF identification"
        },
        {
          "tool_id": "302-dora-cif-identifier",
          "handoff": "cif_register and concentration_risk feed Stage 3 third-party contract checker"
        },
        {
          "tool_id": "305-dora-third-party-contract-checker",
          "handoff": "contract_gaps and remediation_plan feed Stage 4 NIS2/DORA overlap mapper"
        },
        {
          "tool_id": "309-nis2-dora-overlap-mapper",
          "handoff": "nis2_dora_overlap and dual_compliance_plan — final DORA third-party ICT mandate"
        }
      ]
    }