ISO 27001 Business Continuity Awareness

Hello,

The following questionnaire is to determine if everyone is aware of the business continuity plan and knows what to do in case of any calamities. Please fill this out as it is an ISO requirement to test the business continuity plan once a year.

Please fill out the questionnaire without checking the ISMS documentation so that we can determine if further training and testing is required.

You can start with the questionnaire now by clicking on the Continue button below.

Regards, Edwin.

Who shall be notified immediately in the event of a major disaster?

Edwin Haver

Brad Taylor

Tor Malmros

Richelle Wiley

Who shall be notified immediately in the event of an incident affecting the supply and production of SIM and recharge cards?

Edwin Haver

Brad Taylor

Tor Malmros

Richelle Wiley

Where will an updated copy of the Business Continuity Plan be held?

On the J-drive under Common\ISMS Procedures & Policies

A printed copy in the safe at DAFZA

A printed copy in the safe at IMPZ

All of the above

What is the alternate site if DAFZA or IMPZ is affected by a disaster?

DAFZA if IMPZ is affected

An off-site location to be determined by one of the Directors

IMPZ if DAFZA is affected

DAFZA for IMPZ or vice versa

Please choose all that apply. The Continuity Plan may be invoked under the following conditions:

Incident/event causes considerable damage to people, premises and assets and cannot be contained by routine actions.

Event stops the functioning of all processes of the Technical Department for more than 2 working days.

Event stops the functioning of all data related processes for more than 1 working day.

The continuity plan may only be invoked by the recovery manager or delegate.

All major disasters and any incidents affecting the supply and production of SIM and recharge cards will be handled as per the incident management procedures of Workz. (Ref: Incident Management Procedures)

The decision to invoke the continuity plan shall be taken by:

Tor Malmros

The Information Security Officer

The Directors

The Recovery Manager based on the assessment of all members of the Crisis Management Team

In the event of a disaster, the first to know about the event shall ensure that all contacts:

On the same level are made aware of the same immediately

On the same level and 1 level above are made aware of the same immediately

On the same level or 1 level above and below are made aware of the same immediately

On the same level and 1 level below are made aware immediately

Vital contact information can be found:

In the generic Workz contacts list in Outlook / Exchange

In the Business Continuity Plan

In the Workz CRM system

In my phone contact list

Workz system recovery procedures that are within the scope of the ISMS can be found in the

Backup and Recovery Procedure

Recovery Procedures for each individual system stored on the J-drive

Business Continuity Plan

Thank you for filling out the questionnaire. I will share with everyone the results of the questionnaire to determine if training is required.