Business continuity · DORA · NIS2

Built to outlast the siege.

Practitioner guides and ready-to-use forms for business continuity under ISO 22301, digital operational resilience under DORA, and cybersecurity under NIS2. No fear-mongering, no doorstop manuals. Just work that holds.

Browse the library Get launch notes

92original forms

3frameworks

20+ yearsin the field

The library

Three practitioner guides, each with a full set of ready-to-use forms. Start with the book, buy only the pack you need, or take the whole toolkit in Word, PDF or Notion. Every price is a one-time purchase.

Where to buy

Each store carries the formats it does best. Gumroad carries the full range, including bundles and Notion workspaces.

GumroadEverything: ebooks, forms, Notion workspaces and bundles

EtsyForms packs and complete collections

AmazonKindle ebooks and paperback workbooks

Apple BooksEbooks

Google Play BooksEbooks

Prices shown here are a guide. The store shows the final price at checkout, including any VAT that applies where you live. Purchases are covered by the store's checkout terms, our Terms and our Refund policy.

All forms carry a single-organisation licence: use, copy and adapt them within your own organisation; do not resell or redistribute the files.

Every Gurkulla product is educational and practical support. It is not legal, regulatory or audit advice, does not certify compliance, and does not guarantee any regulatory outcome. Companion apps for the App Store are in preparation.

gur + kulla stone · tower

In the highlands of the Albanian lands, families built kulla: towers of dry-laid stone with walls a meter thick and windows narrow enough to defend. When conflict swept the valley, life moved inside and carried on. The kulla was not built for the good years. It was built for the worst one.

That's the standard we hold our work to. Continuity isn't a binder on a shelf; it's the discipline of building, in calm times, the thing that keeps the light on through the siege.

Written from the inside

Gurkulla isn't theory assembled from other people's frameworks. It comes from two decades of running the systems that are not allowed to fail.

20+ years across central banking, IT leadership, and information security
Former CIO & Senior Information Security Officer at the Central Bank of the Republic of Kosovo
Critical financial infrastructure work with the World Bank, IMF, and USAID
Author of practitioner guides and forms toolkits for ISO 22301, DORA and NIS2

Be there when the doors open

One short email when a new guide or forms pack goes live. Nothing else, ever.