Your Details
Policy & Governance
Process & Planning
Tools & Infrastructure
Leadership & Culture
1/5
Confidentiality statement All information provided through this self‑assessment will be treated as strictly confidential. Responses will be used solely for the purpose of evaluating your organisation’s crisis readiness and developing tailored insights and recommendations. Crisis Pathway will not disclose, share, or publish any individual or organisational data without explicit permission. Results may be aggregated or anonymised for benchmarking or research purposes, but no identifiable information will ever be released. By completing this assessment, you confirm that you understand and agree to these confidentiality principles
Your name
Your telephone number
Your email
0%
Crisis leadership roles and responsibilities are clearly defined in our Incident management plan Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have defined incident severity levels based on material impact (low, medium, high, critical) Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Comms, HR, Legal, and Compliance are integrated into crisis planning Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Crisis responsibilities are embedded into relevant job descriptions Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Our business continuity plans align with our regulatory and industry requirements Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have a clear decision‑making framework that enables rapid, risk‑based decisions during a crisis Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
25%
We have documented playbooks for our material risks (e.g., funding, cyber, PR, security) Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
There is a formal escalation process for different levels of disruption/incidents into senior leadership Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Our incident response procedures are current, accessible and understood by all of our executive team and relevant operational leaders Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have disaster recovery sites and activate them on an annual basis to test our resilience Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We regularly test or review the resilience capabilities of our critical third‑party providers Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have mapped critical internal and external dependencies and understand how failures cascade across the organisation Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We conduct operational crisis simulations or tabletop exercises annually that include our senior executives Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Crisis readiness is integrated into strategy and annual planning (e.g., a schedule for scenario tests agreed by the exec at the beginning of your fiscal) Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We conduct annual red team exercises specifically focused on technical and cyber risks Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We understand the critical processes for each department and the time at which their loss would have a material impact on the business Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We regularly validate that our recovery time objectives (RTOs) and recovery point objectives (RPOs) are achievable in practice Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We conduct an annual enterprise‑wide reverse stress test to identify scenarios that could threaten our business model and assess our resilience under extreme conditions Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have plans to maintain critical workforce availability during disruptions (e.g., illness, strikes, travel disruption) Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
50%
We have a reliable alternative communication channel for staff in time of a crisis Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have a clear external crisis communications plan covering customers, regulators, media, and key partners Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We understand our critical assets and are confident that we can achieve our agreed recovery times for each technology Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We regularly test data backup and restoration processes to ensure recovery is reliable and timely Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Crisis documentation and playbooks are accessible and stored in a resilient system Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
75%
Our culture supports psychological safety, enabling staff to raise concerns without fear Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Escalating emerging issues or bad news is encouraged and is regularly reinforced as part of our open communication culture Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Leaders actively participate in post incident reviews Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Teams adapt quickly and effectively when a crisis hits Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We have a structured post incident review methodology that identifies root causes and systemic improvements Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
We maintain a risk aware culture and ensure adherence to material risk controls Choose an item1. Rarely / Not in place2. Sometimes / Inconsistent3. Usually / Works in most situations4. Consistently / Works well under pressure5. Always / Embedded and reliable
Back
100%
Δ
