Self-assessment

Capabilities in the event of an disruption of operations and a crisis situation

Once completed, you will receive a copy via email so that you may discuss it within your organization.

Company name *

Name *

First

Last

Email *

Phone

Note :
- The self-assessment must be fully completed to receive it by email.
- It is not possible to copy-paste, save or print the questionnaire.

GOVERNANCE *

	Yes	No / Don't know	Partly	Not applicable
1. Your organization has a business continuity and crisis management Policy.	Yes1. Your organization has a business continuity and crisis management Policy. Yes	No / Don't know1. Your organization has a business continuity and crisis management Policy. No / Don't know	Partly1. Your organization has a business continuity and crisis management Policy. Partly	Not applicable1. Your organization has a business continuity and crisis management Policy. Not applicable
2. Your organization has a Crisis Pay Policy	Yes2. Your organization has a Crisis Pay Policy Yes	No / Don't know2. Your organization has a Crisis Pay Policy No / Don't know	Partly2. Your organization has a Crisis Pay Policy Partly	Not applicable2. Your organization has a Crisis Pay Policy Not applicable
3. Your organization has a computer, telephone, mobile devices equipment and information asset management use Policy.	Yes3. Your organization has a computer, telephone, mobile devices equipment and information asset management use Policy. Yes	No / Don't know3. Your organization has a computer, telephone, mobile devices equipment and information asset management use Policy. No / Don't know	Partly3. Your organization has a computer, telephone, mobile devices equipment and information asset management use Policy. Partly	Not applicable3. Your organization has a computer, telephone, mobile devices equipment and information asset management use Policy. Not applicable

RISKS, VULNERABILITIES AND IMPACTS *

	Yes	No / Don't know	Partly	Not applicable
4. All risks at each of your locations have been identified and measures are in place to mitigate. (e.g.: flooding, physical access, access to computer applications and systems, teleworking, etc.).	Yes4. All risks at each of your locations have been identified and measures are in place to mitigate. (e.g.: flooding, physical access, access to computer applications and systems, teleworking, etc.). Yes	No / Don't know4. All risks at each of your locations have been identified and measures are in place to mitigate. (e.g.: flooding, physical access, access to computer applications and systems, teleworking, etc.). No / Don't know	Partly4. All risks at each of your locations have been identified and measures are in place to mitigate. (e.g.: flooding, physical access, access to computer applications and systems, teleworking, etc.). Partly	Not applicable4. All risks at each of your locations have been identified and measures are in place to mitigate. (e.g.: flooding, physical access, access to computer applications and systems, teleworking, etc.). Not applicable
5. You are able to deal with a complete and unexpected shutdown of your operations at any time and for a long period of time (products and services).	Yes5. You are able to deal with a complete and unexpected shutdown of your operations at any time and for a long period of time (products and services). Yes	No / Don't know5. You are able to deal with a complete and unexpected shutdown of your operations at any time and for a long period of time (products and services). No / Don't know	Partly5. You are able to deal with a complete and unexpected shutdown of your operations at any time and for a long period of time (products and services). Partly	Not applicable5. You are able to deal with a complete and unexpected shutdown of your operations at any time and for a long period of time (products and services). Not applicable
6. You know the impacts that your company would suffer following a shutdown of its operations. (financial, legal, reputation, etc.).	Yes6. You know the impacts that your company would suffer following a shutdown of its operations. (financial, legal, reputation, etc.). Yes	No / Don't know6. You know the impacts that your company would suffer following a shutdown of its operations. (financial, legal, reputation, etc.). No / Don't know	Partly6. You know the impacts that your company would suffer following a shutdown of its operations. (financial, legal, reputation, etc.). Partly	Not applicable6. You know the impacts that your company would suffer following a shutdown of its operations. (financial, legal, reputation, etc.). Not applicable
7. Maximum tolerable downtime and recovery time objective as well as minimum service levels have been defined.	Yes7. Maximum tolerable downtime and recovery time objective as well as minimum service levels have been defined. Yes	No / Don't know7. Maximum tolerable downtime and recovery time objective as well as minimum service levels have been defined. No / Don't know	Partly7. Maximum tolerable downtime and recovery time objective as well as minimum service levels have been defined. Partly	Not applicable7. Maximum tolerable downtime and recovery time objective as well as minimum service levels have been defined. Not applicable
8. The threshold at which financial viability would become unacceptable has been identified.	Yes8. The threshold at which financial viability would become unacceptable has been identified. Yes	No / Don't know8. The threshold at which financial viability would become unacceptable has been identified. No / Don't know	Partly8. The threshold at which financial viability would become unacceptable has been identified. Partly	Not applicable8. The threshold at which financial viability would become unacceptable has been identified. Not applicable
9. Your company has sufficient insurance coverage that covers all risks.	Yes9. Your company has sufficient insurance coverage that covers all risks. Yes	No / Don't know9. Your company has sufficient insurance coverage that covers all risks. No / Don't know	Partly9. Your company has sufficient insurance coverage that covers all risks. Partly	Not applicable9. Your company has sufficient insurance coverage that covers all risks. Not applicable
10. Your most critical suppliers have business continuity plans.	Yes10. Your most critical suppliers have business continuity plans. Yes	No / Don't know10. Your most critical suppliers have business continuity plans. No / Don't know	Partly10. Your most critical suppliers have business continuity plans. Partly	Not applicable10. Your most critical suppliers have business continuity plans. Not applicable

ABILITY TO HANDLE A CRISIS SITUATION *

	Yes	No / Don't know	Partly	Not applicable
11. A crisis management plan is in place and kept up to date.	Yes11. A crisis management plan is in place and kept up to date. Yes	No / Don't know11. A crisis management plan is in place and kept up to date. No / Don't know	Partly11. A crisis management plan is in place and kept up to date. Partly	Not applicable11. A crisis management plan is in place and kept up to date. Not applicable
12. Roles and responsibilities have been assigned.	Yes12. Roles and responsibilities have been assigned. Yes	No / Don't know12. Roles and responsibilities have been assigned. No / Don't know	Partly12. Roles and responsibilities have been assigned. Partly	Not applicable12. Roles and responsibilities have been assigned. Not applicable
13. You always have access to your employees and external contact information’s (even outside the company network).	Yes13. You always have access to your employees and external contact information’s (even outside the company network). Yes	No / Don't know13. You always have access to your employees and external contact information’s (even outside the company network). No / Don't know	Partly13. You always have access to your employees and external contact information’s (even outside the company network). Partly	Not applicable13. You always have access to your employees and external contact information’s (even outside the company network). Not applicable
14. All employees in your company can be reached in an emergency in less than a minute (even if there are thousands of them).	Yes14. All employees in your company can be reached in an emergency in less than a minute (even if there are thousands of them). Yes	No / Don't know14. All employees in your company can be reached in an emergency in less than a minute (even if there are thousands of them). No / Don't know	Partly14. All employees in your company can be reached in an emergency in less than a minute (even if there are thousands of them). Partly	Not applicable14. All employees in your company can be reached in an emergency in less than a minute (even if there are thousands of them). Not applicable

ABILITY TO HANDLE AN EMERGENCY SITUATION *

	Yes	No / Don't know	Partly	Not applicable
15. An emergency response plan (ERP) is in place and kept up to date (e.g. in case of fire, evacuation, major industrial accident, suspicious package, active shooter, containment, etc.).	Yes15. An emergency response plan (ERP) is in place and kept up to date (e.g. in case of fire, evacuation, major industrial accident, suspicious package, active shooter, containment, etc.). Yes	No / Don't know15. An emergency response plan (ERP) is in place and kept up to date (e.g. in case of fire, evacuation, major industrial accident, suspicious package, active shooter, containment, etc.). No / Don't know	Partly15. An emergency response plan (ERP) is in place and kept up to date (e.g. in case of fire, evacuation, major industrial accident, suspicious package, active shooter, containment, etc.). Partly	Not applicable15. An emergency response plan (ERP) is in place and kept up to date (e.g. in case of fire, evacuation, major industrial accident, suspicious package, active shooter, containment, etc.). Not applicable
16. Occupational health and safety measures were put in place and maintained following the COVID-19 pandemic.	Yes16. Occupational health and safety measures were put in place and maintained following the COVID-19 pandemic. Yes	No / Don't know16. Occupational health and safety measures were put in place and maintained following the COVID-19 pandemic. No / Don't know	Partly16. Occupational health and safety measures were put in place and maintained following the COVID-19 pandemic. Partly	Not applicable16. Occupational health and safety measures were put in place and maintained following the COVID-19 pandemic. Not applicable
17. Material Safety Data Sheets (MSDS) for hazardous products are always available, as are first aid instructions.	Yes17. Material Safety Data Sheets (MSDS) for hazardous products are always available, as are first aid instructions. Yes	No / Don't know17. Material Safety Data Sheets (MSDS) for hazardous products are always available, as are first aid instructions. No / Don't know	Partly17. Material Safety Data Sheets (MSDS) for hazardous products are always available, as are first aid instructions. Partly	Not applicable17. Material Safety Data Sheets (MSDS) for hazardous products are always available, as are first aid instructions. Not applicable
18. Evacuation management teams are in place.	Yes18. Evacuation management teams are in place. Yes	No / Don't know18. Evacuation management teams are in place. No / Don't know	Partly18. Evacuation management teams are in place. Partly	Not applicable18. Evacuation management teams are in place. Not applicable

ABILITY TO HANDLE AN BUSINESS DISRUPTION (Operations) *

	Yes	No / Don't know	Partly	Not applicable
19. Your company has a business continuity plan.	Yes19. Your company has a business continuity plan. Yes	No / Don't know19. Your company has a business continuity plan. No / Don't know	Partly19. Your company has a business continuity plan. Partly	Not applicable19. Your company has a business continuity plan. Not applicable
20. Your company has a plan in case of pandemic and abnormally high absenteeism.	Yes20. Your company has a plan in case of pandemic and abnormally high absenteeism. Yes	No / Don't know20. Your company has a plan in case of pandemic and abnormally high absenteeism. No / Don't know	Partly20. Your company has a plan in case of pandemic and abnormally high absenteeism. Partly	Not applicable20. Your company has a plan in case of pandemic and abnormally high absenteeism. Not applicable
21. Your company has a crisis communication plan.	Yes21. Your company has a crisis communication plan. Yes	No / Don't know21. Your company has a crisis communication plan. No / Don't know	Partly21. Your company has a crisis communication plan. Partly	Not applicable21. Your company has a crisis communication plan. Not applicable
22. Your company has identified approaches or strategies to be able to maintain operations in the event of a major incident or disaster.	Yes22. Your company has identified approaches or strategies to be able to maintain operations in the event of a major incident or disaster. Yes	No / Don't know22. Your company has identified approaches or strategies to be able to maintain operations in the event of a major incident or disaster. No / Don't know	Partly22. Your company has identified approaches or strategies to be able to maintain operations in the event of a major incident or disaster. Partly	Not applicable22. Your company has identified approaches or strategies to be able to maintain operations in the event of a major incident or disaster. Not applicable
23. You have access to important information at all times.	Yes23. You have access to important information at all times. Yes	No / Don't know23. You have access to important information at all times. No / Don't know	Partly23. You have access to important information at all times. Partly	Not applicable23. You have access to important information at all times. Not applicable
24. Workarounds have been defined if your IT systems are unavailable or non-functional.	Yes24. Workarounds have been defined if your IT systems are unavailable or non-functional. Yes	No / Don't know24. Workarounds have been defined if your IT systems are unavailable or non-functional. No / Don't know	Partly24. Workarounds have been defined if your IT systems are unavailable or non-functional. Partly	Not applicable24. Workarounds have been defined if your IT systems are unavailable or non-functional. Not applicable
25. Workarounds have been defined if suppliers are experiencing a disruption in their operations.	Yes25. Workarounds have been defined if suppliers are experiencing a disruption in their operations. Yes	No / Don't know25. Workarounds have been defined if suppliers are experiencing a disruption in their operations. No / Don't know	Partly25. Workarounds have been defined if suppliers are experiencing a disruption in their operations. Partly	Not applicable25. Workarounds have been defined if suppliers are experiencing a disruption in their operations. Not applicable

ABILITY TO HANDLE AN BUSINESS DISRUPTION (Equipment and assets) *

	Yes	No / Don't	Partly	Not applicable
26. All physical access to locations is controlled, employees have access only to areas necessary for their work, and a process for tracking access and cancelling access is put into action as soon as an employee leaves their job or the organization.	Yes26. All physical access to locations is controlled, employees have access only to areas necessary for their work, and a process for tracking access and cancelling access is put into action as soon as an employee leaves their job or the organization. Yes	No / Don't26. All physical access to locations is controlled, employees have access only to areas necessary for their work, and a process for tracking access and cancelling access is put into action as soon as an employee leaves their job or the organization. No / Don't	Partly26. All physical access to locations is controlled, employees have access only to areas necessary for their work, and a process for tracking access and cancelling access is put into action as soon as an employee leaves their job or the organization. Partly	Not applicable26. All physical access to locations is controlled, employees have access only to areas necessary for their work, and a process for tracking access and cancelling access is put into action as soon as an employee leaves their job or the organization. Not applicable
27. Spare equipment is kept in inventory for those that are unique or difficult to replace.	Yes27. Spare equipment is kept in inventory for those that are unique or difficult to replace. Yes	No / Don't27. Spare equipment is kept in inventory for those that are unique or difficult to replace. No / Don't	Partly27. Spare equipment is kept in inventory for those that are unique or difficult to replace. Partly	Not applicable27. Spare equipment is kept in inventory for those that are unique or difficult to replace. Not applicable
28. Your company avoids consolidating critical resources in a single location (e.g. resources: raw materials, production equipment, IT and EO rooms, parts, finished products, storage, vehicles, gas/oil tank, etc.).	Yes28. Your company avoids consolidating critical resources in a single location (e.g. resources: raw materials, production equipment, IT and EO rooms, parts, finished products, storage, vehicles, gas/oil tank, etc.). Yes	No / Don't28. Your company avoids consolidating critical resources in a single location (e.g. resources: raw materials, production equipment, IT and EO rooms, parts, finished products, storage, vehicles, gas/oil tank, etc.). No / Don't	Partly28. Your company avoids consolidating critical resources in a single location (e.g. resources: raw materials, production equipment, IT and EO rooms, parts, finished products, storage, vehicles, gas/oil tank, etc.). Partly	Not applicable28. Your company avoids consolidating critical resources in a single location (e.g. resources: raw materials, production equipment, IT and EO rooms, parts, finished products, storage, vehicles, gas/oil tank, etc.). Not applicable
29. There is an emergency power supply in case of a power failure.	Yes29. There is an emergency power supply in case of a power failure. Yes	No / Don't29. There is an emergency power supply in case of a power failure. No / Don't	Partly29. There is an emergency power supply in case of a power failure. Partly	Not applicable29. There is an emergency power supply in case of a power failure. Not applicable

ABILITY TO HANDLE AN BUSINESS DISRUPTION (Information and operational technologies (IT & OT)) *

	Yes	No / Don't know	Partly	Not applicable
30. Updates are made on IT infrastructure and computers according to the recommended schedules.	Yes30. Updates are made on IT infrastructure and computers according to the recommended schedules. Yes	No / Don't know30. Updates are made on IT infrastructure and computers according to the recommended schedules. No / Don't know	Partly30. Updates are made on IT infrastructure and computers according to the recommended schedules. Partly	Not applicable30. Updates are made on IT infrastructure and computers according to the recommended schedules. Not applicable
31. IT infrastructure and computers have protection against viruses, malware and other risks related to cyber attacks and IT security issues.	Yes31. IT infrastructure and computers have protection against viruses, malware and other risks related to cyber attacks and IT security issues. Yes	No / Don't know31. IT infrastructure and computers have protection against viruses, malware and other risks related to cyber attacks and IT security issues. No / Don't know	Partly31. IT infrastructure and computers have protection against viruses, malware and other risks related to cyber attacks and IT security issues. Partly	Not applicable31. IT infrastructure and computers have protection against viruses, malware and other risks related to cyber attacks and IT security issues. Not applicable
32. There are spam blocking procedures.	Yes32. There are spam blocking procedures. Yes	No / Don't know32. There are spam blocking procedures. No / Don't know	Partly32. There are spam blocking procedures. Partly	Not applicable32. There are spam blocking procedures. Not applicable
33. There is a plan in case of a cyber attack.	Yes33. There is a plan in case of a cyber attack. Yes	No / Don't know33. There is a plan in case of a cyber attack. No / Don't know	Partly33. There is a plan in case of a cyber attack. Partly	Not applicable33. There is a plan in case of a cyber attack. Not applicable
34. There is a plan in case of loss of the computer systems (disaster recovery plan).	Yes34. There is a plan in case of loss of the computer systems (disaster recovery plan). Yes	No / Don't know34. There is a plan in case of loss of the computer systems (disaster recovery plan). No / Don't know	Partly34. There is a plan in case of loss of the computer systems (disaster recovery plan). Partly	Not applicable34. There is a plan in case of loss of the computer systems (disaster recovery plan). Not applicable
35. Databases and other data repositories are backed up are replicated to different site (s).	Yes35. Databases and other data repositories are backed up are replicated to different site (s). Yes	No / Don't know35. Databases and other data repositories are backed up are replicated to different site (s). No / Don't know	Partly35. Databases and other data repositories are backed up are replicated to different site (s). Partly	Not applicable35. Databases and other data repositories are backed up are replicated to different site (s). Not applicable
36. All backup copies have already been restored to the backup site equipment.	Yes36. All backup copies have already been restored to the backup site equipment. Yes	No / Don't know36. All backup copies have already been restored to the backup site equipment. No / Don't know	Partly36. All backup copies have already been restored to the backup site equipment. Partly	Not applicable36. All backup copies have already been restored to the backup site equipment. Not applicable
37. Passwords to access computers and computer networks must be changed by users several times during the year.	Yes37. Passwords to access computers and computer networks must be changed by users several times during the year. Yes	No / Don't know37. Passwords to access computers and computer networks must be changed by users several times during the year. No / Don't know	Partly37. Passwords to access computers and computer networks must be changed by users several times during the year. Partly	Not applicable37. Passwords to access computers and computer networks must be changed by users several times during the year. Not applicable
38. Your company has the technological capabilities and equipment required to work remotely.	Yes38. Your company has the technological capabilities and equipment required to work remotely. Yes	No / Don't know38. Your company has the technological capabilities and equipment required to work remotely. No / Don't know	Partly38. Your company has the technological capabilities and equipment required to work remotely. Partly	Not applicable38. Your company has the technological capabilities and equipment required to work remotely. Not applicable

Tests, exercises, awareness and training to validate and maintain capabilities *

	Yes	No / Don't know	Partly	Not applicable
39. Tests and exercises are carried out regularly throughout the year.	Yes39. Tests and exercises are carried out regularly throughout the year. Yes	No / Don't know39. Tests and exercises are carried out regularly throughout the year. No / Don't know	Partly39. Tests and exercises are carried out regularly throughout the year. Partly	Not applicable39. Tests and exercises are carried out regularly throughout the year. Not applicable
40. Training is provided throughout the year to required employees in the plans.	Yes40. Training is provided throughout the year to required employees in the plans. Yes	No / Don't know40. Training is provided throughout the year to required employees in the plans. No / Don't know	Partly40. Training is provided throughout the year to required employees in the plans. Partly	Not applicable40. Training is provided throughout the year to required employees in the plans. Not applicable

Please verify that all questions are answered before clicking “Submit”. An incomplete questionnaire cannot be sent and you will have to start it all over again.