Your Readiness Snapshot | BCM Navigator

Leave this field empty

Context and scope

Question 1 of 15

1. Have you documented what your organization does, who its key stakeholders are, and the legal, regulatory and contractual requirements that affect its continuity?

NoPartly, or only informallyYes, documentedYes, documented and reviewed in the last 12 monthsDon't know

Question 2 of 15

2. Have you defined which parts of the organization (sites, services, activities) your business continuity program covers?

NoUnderstood informally, not written downYes, a written scopeYes, a written scope approved by managementDon't know

Leadership and policy

Question 3 of 15

3. Do you have a business continuity policy approved by top management?

NoA draft, not yet approvedYes, approvedYes, approved, shared with staff, and with objectives setDon't know

Question 4 of 15

4. Are roles, responsibilities and authorities for business continuity assigned?

NoInformallyYes, to named peopleYes, documented, and the people know and are trained for their rolesDon't know

Business impact analysis

Question 5 of 15

5. Have you done a business impact analysis that sets recovery time objectives for your most important activities?

NoStarted, or only partlyYes, for the most important activitiesYes, approved and reviewed in the last 12 monthsDon't know

Question 6 of 15

6. Do you know the people, technology, facilities, information and suppliers your most important activities depend on?

NoPartly, not written downYes, documentedYes, documented and kept up to dateDon't know

Risk assessment

Question 7 of 15

7. Have you assessed the risks of disruption to your most important activities?

NoInformallyYes, a documented assessmentYes, documented and reviewed in the last 12 monthsDon't know

Question 8 of 15

8. Have you decided how to handle the main disruption risks (reduce, transfer or accept them) and given each action an owner?

NoSome actions, not trackedYes, with ownersYes, with owners and progress trackedDon't know

Strategies and plans

Question 9 of 15

9. Have you chosen how you would continue or recover your most important activities within their recovery time objectives?

NoSome ideas, nothing decidedYes, for some activitiesYes, for all the most important activities, approvedDon't know

Question 10 of 15

10. Do you have written business continuity plans that people can follow during a disruption?

NoOut of date or incompleteYes, for the most important activitiesYes, current, approved and available to the people who need themDon't know

Question 11 of 15

11. Do you have a documented way to manage a crisis and to communicate with staff, customers and other stakeholders during one?

NoInformallyYes, documentedYes, documented, with contact lists kept up to dateDon't know

Exercising and testing

Question 12 of 15

12. Have you exercised or tested your business continuity plans?

NoYes, but not regularlyYes, on a planned scheduleYes, on a planned schedule, with results recorded and acted onDon't know

Question 13 of 15

13. After an exercise or a real incident, do you record lessons learned and update your plans?

NoSometimes, informallyYes, usuallyYes, every time, with actions tracked to completionDon't know

Review and improvement

Question 14 of 15

14. Is your business continuity program checked against its own requirements, for example by internal audit?

NoPlanned, not yet doneYes, it has been checkedYes, on a planned schedule, with findings followed upDon't know

Question 15 of 15

15. Does top management formally review the business continuity program and decide on improvements?

A general management meeting where continuity comes up does not count.

NoOnly discussed in general meetingsYes, a formal reviewYes, formal reviews at planned intervals, with decisions recordedDon't know