If the facilities are provided by a third party, please indicate the name of the third party, and distance from the primary data center in the comments field.

Do backup facilities (data centers and/or people recovery sites) use power, water and transportation arrangements that are different from those used at the primary data center or facility?

Does your organization have a risk BCP assessment program for vendors your organization depends on?

Does the policy for maintaining backups of systems and data require the data to be stored off-site in a secure environmentally controlled facility?

Do you have a backup data center/facility?

Is Are the plan and business impact analysis reviewed by senior management and the board of directors at least annually?

Please provide your business continuity and redundancy plans for the scoped service

What is your Recovery time Objective and Recovery Point Objective for the scoped services and data?

Does your company conduct a Business Impact Analysis?

Are the plan and business impact analysis reviewed by senior management and the board of directors at least annually?