Business Continuity & Operational Resilience Checklist
Interactive Readiness Scorer
Interactive 15-question assessment to evaluate your organization's preparedness for business disruptions across risk assessment, planning, recovery, and third-party resilience.
Walk away with a concrete, actionable implementation plan.
General guidance for educational purposes only — not legal, regulatory, or compliance advice. Review results with qualified professionals.
This interactive assessment evaluates your organization's preparedness for business disruptions. Answer 15 questions across 5 categories to understand your resilience posture and identify critical gaps.
Fully implemented
In progress
Needs attention
Risk Assessment & Business Impact Analysis
Understanding potential disruptions and their impact
1.1 Have all critical business functions and their dependencies (people, processes, technology, and third parties) been clearly identified and documented?
1.2 Is there a regular process for identifying and assessing potential threats (cyberattacks, natural disasters, utility failures) and vulnerabilities to your critical business functions?
1.3 Has a comprehensive Business Impact Analysis (BIA) been conducted to determine the financial and operational impacts of disruptions, establishing Recovery Time and Recovery Point Objectives?
Business Continuity Planning & Strategy
Developing plans for continued operations
2.1 Is there a documented, approved, and accessible Business Continuity Plan (BCP) that outlines procedures for responding to and recovering from disruptive events?
2.2 Have specific recovery strategies been defined and resourced for each critical business function to meet their established RTOs and RPOs?
2.3 Is there a clear crisis management and communication plan in place for internal and external stakeholders during a disruptive event?
Disaster Recovery & IT Resilience
Ensuring technology infrastructure can withstand disasters
3.1 Is there a separate, documented, and regularly updated Disaster Recovery (DR) plan for critical IT systems, applications, and data?
3.2 Are comprehensive data backup and restoration strategies in place, with regular testing to verify successful data recovery?
3.3 Are critical IT systems and infrastructure designed with redundancy and failover capabilities to minimize single points of failure?
Testing, Training & Maintenance
Keeping plans current and teams prepared
4.1 Is there a regular program of testing and exercises (tabletop, simulation, live drills) for business continuity and disaster recovery plans?
4.2 Are all relevant employees regularly trained on their roles and responsibilities in business continuity and disaster recovery procedures?
4.3 Are the BCP and DR plans regularly reviewed and updated (at least annually) to reflect organizational changes, lessons learned, and evolving threats?
Supply Chain & Third-Party Resilience
Managing external dependencies and vendor risk
5.1 Is there a process for assessing the business continuity and disaster recovery capabilities of critical suppliers and third-party service providers?
5.2 Do your contracts with critical third parties include specific requirements for their business continuity, disaster recovery, and data protection capabilities?
5.3 Is there ongoing monitoring of third-party risks, including their financial stability, security posture, and compliance status?
Keep Exploring
More Tools to Build the Picture
Continue Your Assessment
Related tools to deepen your analysis and build a complete picture.
"Am I a Target?"
Find out how attractive your business is to cybercriminals. 4 questions, instant risk score.
The 3 AM Test
What happens if your systems go down at 3 AM? Test your incident response readiness.
Shadow AI Discovery
Find hidden AI tools across your organization. Identify risks before they find you.
Want additional insights sent to your inbox?
We'll send a personalized summary with recommendations based on your results.
Ready for a real conversation?
See How Your Results Compare to Other San Diego Businesses
Our 30-minute consultation reviews your results, answers your questions, and gives you a realistic picture of where you stand — no sales pitch, no obligation.
No commitment. No sales pressure. Just answers.