Operational Questionnaire - BlueSage Disaster Planning

Building
Workplace Technology People Business
Operations Insurance

Are you responsible for the operations of your building(s)/Store/Office/home?

Do you have a floor plan of your building(s)/Store/Office/home?

Are the floor plans accessible on our mobile phone or in the cloud, so you can access them through another remote device?

Does it include the mechanical room and location of major equipment?

Are shut off locations for all utilities lines including electric, water and gas clearly marked on the layout?

Are shut off locations for all utility lines including electric, water and gas marked with a large tag at the shutoff location?

Is the security at your building(s)/Store/Office/home sufficient to protect your business?

Does your work location have a generator?

Is your company responsible for its operation?

Is it possible to add a generator?

Does the generator have enough power to operate all your critical processes?

Can you operate from a remote location those critical processes that are not being powered by your generator?

Can you expect a continuous flow of fuel to power your generator for a minimum of one week and preferable two weeks, and is your generator rated for long term running capability? (answer No if you are not sure)

If you had an option to change your generator fuel source to a continuous flow option, would you do so?

Do you have backup filters and motor oil, and do you or someone on staff know how to change them in case a maintenance provider is unavailable to help you?

Do you have an Internet website?

Do you host your internet website?

Do you back up your internet website at least every day, if not more frequently?

Have you made plans to host your website at a remote location if the building which your website hardware was located became unusable because of a disruption?

Is the remote website at least 100 miles away from your main site, whether it is your own- or third-party cloud based?

Do you know if your website host is backing up the data in their system in case the data in their system was lost?

Is the alternate site that your web host is backing up your data to at least 100 miles away in case of a regional hazard?

Do you sell products on your website?

Do you keep customer data in your system?

Do you have an intranet website for internal use, not to be confused with an internet website?

Do you host your website?

Do you back up your intranet website at least once a day, if not more frequently?

Have you checked if your third -party host is properly backing up your data?

If your communication lines are not working because of a disruption at your location, can you quickly reroute calls and internet service to a remote location?

Do you have a plan in place if your provider was to lose connectivity for an extended period of time?

Do you have a written procedure that you shared with key employees on how to transfer those lines?

Do you have uninterruptible power supplies (UPS) connected to all computers and other equipment holding data?

Do you have a technology employee or consultant on staff?

Are you the technical employee?

Are you confident in your technical ability during a business disruption when it might be difficult to find an IT consultant to help you?

Is access to your computer system/s, laptops and mobile devices password protected?

Do you require passwords to have at least 8 characters or more and do they include upper case letters, lower case letters, numbers and symbols?

Do you use two-factor Authentication offered by your email provider?

Are you using a Virtual Private Network (VPN) to prevent unwanted intrusion into your network?

Are you limiting access into your system so that employees can only use those areas that pertain to their work?

Do you have anti-virus/anti-spam software on all computers, servers, networks and mobile devices?

Does your anti-virus/anti-spam software provide continual updates for the latest virus’s that are discovered?

Are you implementing updates when you receive it?

Have you installed firewall software to protect your network against malicious software from entering your system?

Are you implementing updates when you receive it?

Is your critical computer data backed up at least once every 24 hours?

Is the back-up in the cloud?

Is a copy of the backup taken off premises every day and kept in a secure location?

Is each backup kept for at least one week at the remote location?

Have you considered doing both cloud and manual backups?

Are you testing your backups?

Do you have a plan to reestablish your computer system in a remote location if your present location becomes inaccessible?

Do you process payments on behalf of your customers, including Ecommerce transactions?

Is data from the transactions kept in your company’s computer system?

Is data held by a third-party host and/or credit card company?

Have you taken steps to prevent unwanted intrusion into your system?

Do you have a communication disruption strategy that includes easily accessible contact information, so you can reach your employees, customers, vendors and emergency contacts?

Do you routinely update your contact list of names, addresses, numbers and email addresses, so you can rely on the information when needed?

Have you discussed your communication disruption strategy with our employees so that they are clear how they will communicate and to whom if regular systems are down?

Do your methods of communication also include media and/or social media?

If your employees could not come to your work location due to transportation disruptions, do they have alternate means of transportation or work locations options?

Have you already discussed the plan with your employees so that if and when an event happens, everyone knows what to do?

Do you have adequate funds to pay employees for at least two weeks if your business is not operational?

In case electronics are not working in your area, have you talked with your bank or payroll provider about alternate means of payment?

If payment cannot be made, you run the risk of losing some employees. Have you considered alternate plans to retain your employees during this period?

Have you considered how you would transition your business or a portion of your business to a remote location if you had to?

Is the remote location in a different geographic area than your present location?

Does your remote location include employees working from homes?

Do you use a warehouse for your operation?

Do you have a plan to move your warehouse house operations to a remote location in case a disruption makes your warehouse partially or totally inoperable?

If you could not obtain raw materials or finished goods for your operation, do you have backup sources you could quickly turn to, to maintain your supply chain?

Does your business own or lease delivery vehicles?

If a business disruption took place in your area and many of your delivery vehicles were damaged, do you have an alternate means to continue deliveries?

Do you maintain an asset inventory that includes closing documents for real estate, bills of sale for machinery, furniture, computers, communication equipment, trucks, etc.?

Does your Asset Inventory include good quality photos?

Do you update your Asset inventory and photos regularly?

Do you keep a copy of the asset inventory and photos off site or in the Cloud?

Do you have insurance that adequately covers the replacement value of your business contents and real estate in the event of a loss?

Have you discussed potential gaps and risks along with appropriate levels of insurance with your broker or carrier?

Do you have liability insurance?

Do you have adequate amount of liability insurance for your business and industry?

Have you discussed appropriate insurance protection against cyber-attacks?

Does your Cyber insurance include Social Engineering?

Do you have business interruption insurance?

Do you periodically review with your broker or carrier business risks and adjust the amount of coverage?

Insurance is a complex subject which needs to be tailored to each individual business’s needs. Talk with your insurance broker or carrier to discuss the best alternatives.

Score

Congratulations! You just completed one of the most important steps to developing a Business Continuity Plan!