The following questionnaire oulines a series of questions which may help you evaluate both your current business continuity plan and provider. You may securely and privately submit your answers so that we may contact you to discuss your current plan and future needs.
A1. In the event of a disaster or signficant disruption, does your organization have documented plans for business continuity and IT disaster recovery?
A2. If you answered "Yes" to Question (A1), what type of failure scenarios or outages have you planned for?
A3. If you answered “Yes” to Question (A1), what duration of time is assumed for each type of failure scenario or outage you plan for?
Unit of Measure
A4. If you answered "Yes" to Question (A1) does the plan establish critical business functions with recovery priorities?
A5. If you answered "Yes" to question (A4) what is the expected recovery time for your critical business functions?
A6. If you answered "Yes" to Question (A1) does the plan account for interdependencies both internal and external to your organization?
A7. If you answered "Yes" to Question (A1) does the plan cover some, most, or all locations from which you provide your services?
If you selected "Other" above please specify.
A8. If you answered "Yes" to Question (A1), what percentage of the "business as usual" servicing capability is the plan designed to address?
A9. Do you have a dedicated team of professionals focused on business continuity and/or IT disaster recovery?
A10. If you answered "No" to Question (A9), do you use an external BCP/DR service provider to handle your planning needs?
A11. Is your main IT facility or datacenter located in the same building or office complex occupied by your main business or operations staff?
A12. Can you provide an illustration or schematic of how your organization's primary, secondary, and/or tertiary servicing centers are setup to provide redundant services to customers.
B2. If you answered "Yes" to Question (B1) does this process cover internal and external communications during a crisis event?
B3. How would you notify xxx of an outage?
B4. Do you provide xxx with detailed contact information in the event of an outage or emergency?
B5. Please describe how you notify your team of an incident and direct them through the recovery.
C Back Up Facilities
C1. Does your organization have an alternate site location for data center recovery purposes?
C2. If you answered "Yes" to Question (C1) what is the approximate distance between your production (primary) site and alternate (secondary) site for data center recovery purposes?
Unit of Measure
C3. Does your organization have an alternate site location for work area recovery purposes?
C4. If you answered "Yes" to Question (C3), what is the approximate distance between your production (primary) site and alternate (secondary) site for work area recovery purposes?
Unit of measure
C5. Do you use an external BCP/DR service provider for your data center recovery needs?
C6. Do you use an external BCP/Dr Service provider for your area recovery needs?
C7. If you answered "Yes" to Question (C6), is your contract with your BCP/DR service provider honored on a first-come/first-served basis?
C8. What recovery strategy does your organization use for mainframe systems?
C9. What type of recovery strategy does your organization use for distributed systems?
C10. Is the processing capacity of your back-up facility equal to that of your prmary facility?
C11. If you answered "No" to question (C10), what is the capacity ratio of your back up to your primary facility?
C12. Is it feasible to run from your back-up facility for an extended period? (at least six weeks)
D Testing
D1. If you answered "Yes" to Question (A1), is the plan periodically tested?
D2. If you answered "Yes" to Question (D1), how frequently is the plan tested?
If you selected "Other" please specify.
D3. Do you have BCP test dates scheduled over the next 12-18 months?
D4. If you answered "yes" to Question (D3), please list those dates.
D5. If you answered "Yes" to Question (D1) do you involve IT staff, business unit, or operations staff or both in your internal BCP/DR tests?
D6. If you answered "Yes" to Question (D1), would you involve xxx in your external BCP/DR tests?
D7. If you answered "Yes" to question (D1), do internal or external auditors review your BCP/DR tests?
D8. If you answered "Yes" to Question (D1) what components of your system and infrastructure are tested?
E September 11th
E1. Did your organization invoke its business continuity or IT disaster recovery plan(s) as a result of the September 11 tragedy?
E2. Has your organization enhanced its business continuity planning initiative, or is in the process of enhancing its plans, as a result of September 11?
F BCP Support
F1. Please provide primary and alternate contact information for communication during an emergency.
