Data Protection

Business Continuity Questionnaire

Continuity Questionnaire

The following questionnaire oulines a series of questions which may help you evaluate both your current business continuity plan and provider. You may securely and privately submit your answers so that we may contact you to discuss your current plan and future needs.

 
 
 
B. Crisis Communiction
B1. Do you have a documented crisis management process within your organization?

B2. If you answered 'Yes' to Question (B1) does this process cover internal and external communications during a crisis event?

B4. Do you provide customers with detailed contact information in the event of an outage or emergency?

A1. In the event of a disaster or significant disruption, does your organization have documented plans for business continuity and IT disaster recovery?

A4. If you answered 'Yes' to Question (A1) does the plan establish critical business functions with recovery priorities?

A5. If you answered 'Yes' to question (A4) what is the expected recovery time for your critical business functions?






A6. If you answered 'Yes' to Question (A1) does the plan account for interdependencies both internal and external to your organization?

A7. If you answered 'Yes' to Question (A1) does the plan cover some, most, or all locations from which you provide your services?




A8. If you answered 'Yes' to Question (A1), what percentage of the 'business as usual' servicing capability is the plan designed to address?






A9. Do you have a dedicated team of professionals focused on business continuity and/or IT disaster recovery?

A10. If you answered 'No' to Question (A9), do you use an external BCP/DR service provider to handle your planning needs?

A11. Is your main IT facility or datacenter located in the same building or office complex occupied by your main business or operations staff?

A12. Can you provide an illustration or schematic of how your organization's primary, secondary, and/or tertiary servicing centers are setup to provide redundant services to customers.

C. Backup Facilities
C1. Does your organization have an alternate site location for data center recovery purposes?

C3. Does your organization have an alternate site location for work area recovery purposes?

C5. Do you use an external BCP/DR service provider for your data center recovery needs?

C6. Do you use an external BCP/Dr Service provider for your area recovery needs?

C7. If you answered 'Yes' to Question (C6), is your contract with your BCP/DR service provider honored on a first-come/first-served basis?

C8. What recovery strategy does your organization use for mainframe systems?




C9. What type of recovery strategy does your organization use for distributed systems?




C10. Is the processing capacity of your back-up facility equal to that of your prmary facility?

C11. If you answered






C12. Is it feasible to run from your back-up facility for an extended period? (at least six weeks)

D. Testing
D1. If you answered 'Yes' to Question (A1), how frequently is the plan tested?

D2. If you answered 'Yes' to Question (D1), how frequently is the plan tested?


D3. Do you have BCP test dates scheduled over the next 12-18 months?

D5. If you answered 'Yes' to Question (D1) do you involve IT staff, business unit, or operations staff or both in your internal BCP/DR tests?

D6. If you answered 'Yes' to Question (D1), would you involve xxx in your external BCP/DR tests?

D7. If you answered 'Yes' to question (D1), do internal or external auditors review your BCP/DR tests?

E. September 11
E1. Did your organization invoke its business continuity or IT disaster recovery plan(s) as a result of the September 11 tragedy?

E2. Has your organization enhanced its business continuity planning initiative, or is in the process of enhancing its plans, as a result of September 11?

F. BCP Support