Resilience self-check · about 4 to 6 minutes

Backup & recovery readiness

Check whether recovery expectations match tested capability. Rate 12 original prompts as Operating, Partial, Planned, Not in place or Not sure, see your readiness by area, and get a remediation template for every gap. Everything stays in your browser.

12 prompts4 areas100% privateFree

Start this assessment See all 15

Scope. 12 original resilience screening questions. Not a complete business continuity audit, disaster recovery test or guarantee of restoration. Reference: NIST contingency planning guidance (context only, not an endorsement).

What this assessment covers

The 12 prompts, grouped by area. Each one has a "what to look for" note and a concrete action inside the assessment.

Priorities

Have business owners identified the services that must recover first?
Are acceptable downtime and data-loss targets defined?
Do recovery plans cover key configuration and identity systems?

Copies

Are backup jobs and failures actively checked?
Are recovery copies protected from the primary administrator compromise?
Are backup encryption and key-recovery arrangements understood?

Restoration

Has a representative restore been completed recently?
Does a service owner check usability after restoration?
Are recovery-time measurements compared with agreed targets?

Coordination

Can the team access the recovery runbook during an outage?
Are authority and communication routes rehearsed?
Are lessons and system changes reflected in the plan?

How scoring works. Only rated prompts count toward the index. Not sure and unanswered prompts are reported separately and never scored as a pass or a gap. Gaps are listed highest priority first, each with a link to a matching template in the open GRC Documentation Kit. This is a conversation starter, not an audit or a certification.

Start the Backup & recovery readiness assessment

Other assessments: NIST CSF 2.0 · ISO 27001 readiness · SOC 2 preparation · Cloud & identity · AI & agent security · SOC & incident readiness · Small business security · Web & API release readiness · Supplier security review · Secure software delivery · Identity & privileged access · Mobile release readiness · Data protection operations · Security culture & role readiness