Business Continuity Readiness Check

Rate how ready you are to keep running through a disruption: a system outage, a lost site, a supplier failure or key people away.

1. 1. The activities that must keep running are listed, with how long each can stop.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
2. 2. The main risks (systems, site, suppliers, key people) are listed with their likely impact.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
3. 3. Key suppliers and single points of failure are identified, with alternatives where possible.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
4. 4. There's a written continuity plan people can reach even if your systems are down.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
5. 5. Roles in a disruption (who decides, who does what) are named, with deputies.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
6. 6. Key people's knowledge is documented so others can step in.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
7. 7. Important data is backed up automatically, with a copy kept separately.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
8. 8. You've restored from backup in the last year and know how long it takes.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
9. 9. You know how you'd keep working if your main site or main system were unavailable.

   Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
10. 10. An up-to-date contact list for staff, suppliers and key customers is kept outside your main systems.

    Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
11. 11. There are prepared messages and channels for telling staff and customers what's happening.

    Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
12. 12. The plan is tested at least yearly with an exercise or walkthrough.

    Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
13. 13. Lessons from tests and real incidents are used to update the plan.

    Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date
14. 14. The plan is reviewed when the business changes: new systems, sites or suppliers.

    Not in placeStarted, or done informallyMostly in placeFully in place and kept up to date