1
Have you done a risk assessment showing which risks cause the most serious damage to your company?
Yes
No
2
In the case of a disaster, has an evacuation site, evacuation procedures and roles been determined?
Yes
No
3
Is your company aware of all required recovery measures and procedures that must be conducted in the time of a disaster as determined by regulatory bodies?
Yes
No
4
Do you have proper insurance coverage on your company's fixed assets?
Yes
No
5
Have you set up an emergency communication network and it is being updated and maintained in a timely manner?
Yes
No
6
Have you identified all risks and have the corresponding counter measures been determined and do you have the approval of management concerning the risks that have not been addressed?
Yes
No
7
In the case of a disaster, have you determined the team that will evaluate the status of key operational, financial, reputation and other risk areas?
Yes
No
8
At the time of a disaster, given that resources are limited have you determined which business operations take priority over others and the impact of the suspension of certain operations?
Yes
No
9
Has upper management established a specific policy on Business Continuity?
Yes
No
10
Do you have at least one specific BCP plan related to a specific disaster case scenario?
Yes
No
11
Does your company periodically back up your system data and is this data being transferred to your backup data center located in a remote place?
Yes
No
12
Has a method of backing up important documents such as customer contracts, etc., inside the company been established and has it been implemented?
Yes
No
13
Have you signed SLA (service level agreements) with your vendors and service providers?
Yes
No
14
In the time of a crisis or disaster, has a plan to determine the flow of communication been established and can your company's Crisis Management Command Center be set up smoothly?
Yes
No
15
Have you established a Business Continuity Plan for each branch office and factory?
Yes
No
16
Are the proper measures in place for the restoration of your system within the limits of your RTO (Recovery Time Objectives)?
Yes
No
17
Does your company have periodic meetings where management is kept abreast of the current status of BCM?
Yes
No
18
Does your company periodically conduct training to test the effectiveness of your BCP?
Yes
No
19
Have you taken steps to set up production capabilities in various locations and have you taken steps to mitigate supply chain risk by using various vendors?
Yes
No
20
Have you considered more than 3 disaster case scenarios and do you have a specific BCP plan for each?
Yes
No
21
Have all material and human resources of the company including such things as intellectual property been properly appraised and is currently up to date?
Yes
No
22
Do you have more than 2 back up sites and is one of them in a foreign country?
Yes
No
23
Is your BCP an integrated part of your J-SOX internal control system?
Yes
No
24
Have you already acquired your Information Security Management System (ISMS) certification and is your BCP an integrated part of this system?
Yes
No
25
Following a disaster, do you update your BCP strategy taking into consideration industry, business environmental, and economic outlook factors?
Yes
No