Skip to content
KaitoSec
ENDE
Book a demo

Browser-local readiness check

How resilient is your business continuity management?

20 questions check mandate, BIA, strategies, plans and exercises. The answers stay exclusively in this browser.

Back to Business continuity
  1. 01

    Mandate & scope

    Has leadership approved objectives, a mandate and resources for the BCMS?

    Expected evidence: BCM policy or leadership resolution

  2. 02

    Mandate & scope

    Are the scope, services, sites and key interfaces defined?

    Expected evidence: Approved scope description

  3. 03

    Mandate & scope

    Are BCM roles, deputies and decision rights documented?

    Expected evidence: Role and deputy matrix

  4. 04

    Mandate & scope

    Are interfaces with ISMS, ITSCM, crisis management and risk management regulated?

    Expected evidence: Process and interface description

  5. 05

    BIA

    Is a consistent BIA methodology with time steps and damage categories in use?

    Expected evidence: BIA methodology

  6. 06

    BIA

    Are time-critical services prioritised based on documented damage curves?

    Expected evidence: Approved BIA results

  7. 07

    BIA

    Are the RTO, minimum level and critical resources determined for each service?

    Expected evidence: BIA documentation sheet

  8. 08

    BIA

    Are dependencies between services, resources and suppliers recorded?

    Expected evidence: Dependency overview

  9. 09

    Strategies

    Are the relevant outage scenarios defined organisation-wide?

    Expected evidence: Scenario catalogue

  10. 10

    Strategies

    Are solution options assessed against BIA targets, effort and residual risk?

    Expected evidence: Strategy decision

  11. 11

    Strategies

    Are approved BC solutions funded and implemented with owners?

    Expected evidence: BCM action plan

  12. 12

    Strategies

    Are time-critical suppliers managed with verifiable BCM requirements?

    Expected evidence: Requirements catalogue and evidence

  13. 13

    Response

    Are alerting and escalation thresholds described unambiguously?

    Expected evidence: Alerting matrix

  14. 14

    Response

    Is the dedicated response organisation prepared with roles and working methods?

    Expected evidence: Emergency manual or crisis team charter

  15. 15

    Response

    Do current business continuity and recovery plans exist for prioritised services?

    Expected evidence: Approved BC plans

  16. 16

    Response

    Are plans and contact details available even if central IT fails?

    Expected evidence: Offline or fallback storage

  17. 17

    Exercise & improve

    Does a multi-year exercise plan cover roles, plans and critical dependencies?

    Expected evidence: Exercise programme

  18. 18

    Exercise & improve

    Are exercises evaluated against criteria defined in advance?

    Expected evidence: Exercise report

  19. 19

    Exercise & improve

    Are findings tracked through to the effectiveness check?

    Expected evidence: Action register

  20. 20

    Exercise & improve

    Does leadership regularly assess the performance, changes and improvement needs of the BCMS?

    Expected evidence: Management review

Do not lose the results in yet another file.

KaitoSec connects requirements, owners, risks, controls and evidence in one working model.

BCMS in KaitoSec