Is Your Organization Ready For Today’s Threats?

Is Your Organization Ready For Today’s Threats?

This 10-question Business Continuity Assessment will grade your plan and give you concrete steps to improve.

  • A Business Impact Analysis (BIA) identifies critical processes, products and services and establishes how quickly they must be restored/recovered after a disaster.

    When did you last conduct a BIA?

  • How quickly do you need to recover your business after a disaster before it faces bankruptcy?

  • If your business is interrupted by a serious incident:

    What's your recovery time objective for key products or services?

  • In the event of an incident that could result in some lost data:

    How much data could you afford to lose?

  • A Risk Assessment (RA) helps an organization identify and analyze threats that require mitigation and/or contingency measures:

    How many risks have you identified that need mitigation or contingency measures?

  • Which strategy are you using?

    • A Diversification strategy is where an organization spreads its operation over two or more locations.
    • A Replication strategy is where an organization has a dormant copy of its operation that can be quickly used for a recovery.
    • A Standby strategy is adopted when a facility can be operational within a few days of a disaster.
    • The Do Nothing strategy is adopted by an organization that has decided to fix any incidents once they know the nature of the incident that they are dealing with.

  • A Business Continuity Plan (BCP) should contain the following sections:

    • Clearly documented roles and responsibilities, with backups for each role
    • Communication procedure for internal and external stakeholders, including contact details and communication channel
    • An action list with details of prioritized activities with their respective timeframes
    • Contingency measures to be put in place until normal operations have been restored
      How many of the above are included in your Business Continuity Plan?

  • Work Area Recovery (WAR) planning covers relocating your employees when your building can't be accessed:

    How many employees will be accommodated by your WAR plan?

  • It's important to validate your Business Continuity Plan annually

    Excluding testing ICT disaster recovery plans, fire alarm and emergency evacuation exercises, how many exercises did you run within the last year?

  • How many employees know what to do during a disaster, including their specific roles and responsibilities as part of the Business Continuity Plan?