Has a budget for business continuity planning and resources been established at your organization?

Has a risk assessment that categorizes potential threats (both internal and external), as well as related impacts, been performed on all critical operations of the company?

Has a Business Impact Analysis study been performed to identify and prioritize critical business functions and the timeframes to recover those functions to reduce the adverse impact of a business interruption to the company?

Has the organization developed business recovery strategies and plans for the resumption of critical business functions and support services (i.e., physical facilities, equipment, telecommunications, information technology, vendors, etc.)?

Is there a chance that data could be irretrievably lost if a business disruption occurred between the last data backup process and the time of a business disruption?

Are recovery plans for information technology and critical operational business units tested on at least an annual basis?

Are results of periodic exercising and testing of crisis management, information technology, and operations recovery reported to senior management and the Board of Directors?

Has a cyber security plan been developed to detect, respond, and recover from unauthorized intrusions and thefts of the company’s data and information?

Do business continuity education and awareness programs exist to ensure that employees are trained to respond to emergency situations and execute business recovery plans if required?

Have emergency response teams been formed and trained to carry out procedures and respond to emergency situations?

Has a crisis management team been formed to manage incidents and recovery of operations?

Has a formal crisis communications strategy and plan been developed to manage crisis related messaging and media (social, public, private) to employees, customers, vendors, stakeholders, etc. during a crisis event?

Has a pandemic response plan been developed to guide the company to respond and minimize the effect of pandemic surges impacting employees and customers?

Do insurance policies cover losses associated with damaged facilities and equipment, cyber security, extra expense, lost revenue, etc. that may be incurred as a result of a significant disaster event?

Are you confident that third party vendors, upon which you rely on for information technology and supply chain services, would recover from a business interruption and have minimal impact on your operation?

Have regulators of your industry, consultants or auditors been critical of your organization’s business continuity planning efforts in the past?

In the event of a significant business disruption, do you feel certain that the critical components of your organization would be back in operation within * business days?