Is your organisation genuinely ready for an IT incident?

How to answerAnswer Yes if someone is formally assigned and everyone knows how to contact them. Choose Partly if the role is informal or has no backup person.

How to answerAnswer Yes if a list or tool records the equipment, its user and status and is updated when things change. An old or incomplete spreadsheet is Partly.

How to answerAnswer Yes if you track end-of-support dates for Windows, servers, firewalls and important software. Choose Partly if only some systems are tracked.

How to answerAnswer Yes if everyone signs in with their own name and leavers' accounts are removed. Choose Partly if shared accounts still exist.

How to answerA second verification can be a phone code or an approval in an app. Answer Yes if it covers every sensitive account, or Partly if only some users are protected.

How to answerAnswer Yes if devices install updates automatically and critical fixes are checked within two weeks. Choose Partly if installation depends on each user.

How to answerAnswer Yes if protection is active on every computer and server and someone receives alerts. Choose Partly if some devices are missing or alerts are not monitored.

How to answerAnswer Yes if every connection passes through a configured and monitored business firewall. An unchecked provider modem alone is closer to Partly.

How to answerAnswer Yes if Wi-Fi uses WPA2/WPA3 with a controlled password and visitors use a separate network. Choose Partly if everyone shares the same Wi-Fi.

How to answerAnswer Yes if administrators use a separate MFA-protected account only for cloud management. Choose Partly if the everyday account also has full admin rights.

How to answerAnswer Yes if a list identifies important data, its location, owner and sensitivity. Choose Partly if this information only exists in people's memory.

How to answerAnswer Yes if files, email, business software and configurations can all be recovered from automatic backups. Choose Partly if some data or manual backups are missing.

How to answerAnswer Yes if at least one copy is offline, immutable or protected by a separate account. An always-connected disk or the same password is only Partly.

How to answerAnswer Yes if a real restore succeeded recently and the recovery time was recorded. Merely seeing “successful” in backup software is only Partly.

How to answerAnswer Yes if an offline-accessible document lists contacts and first actions: isolate, call, communicate and recover. Choose Partly if instructions are only verbal.

How to answerAnswer Yes if every new employee is trained and receives at least annual practice. An occasional information email is Partly.