Some key objectives include:

Primary

1. The first objective is to assess the client's overall readiness by looking at their capacity to tactically respond to and manage an incident through Business Continuity Planning (BCP), Emergency Management (EM), Incident Response, and Disaster Recovery processes to appropriately minimize risk and maintain service if critical information is lost or other types of breaches may occur.
2. The second objective is to examine how the client systematically and strategically manages this important program. Castellan Information Security representatives will speak with key players within the client to obtain information regarding what planning has been put in place, how the client is structured to manage these situations and to obtain an overall assessment of the state of readiness for the client. Key documents such as BCP plans, EM protocols, recommendations from previous exercises, etc. will be collected and reviewed.

Secondary

1. Assess the status and scope of the organization's EM and BCP Program?
2. Establish the extent that BIA's are used to guide the EM and BCP Program?
3. Determine if appropriate roles and responsibilities have been established?
4. Analyze the client's EM and BCP plans to determine level of suitability and thoroughness?
5. Assess the incident command, reporting and notification capabilities and readiness?
6. Are the roles of response, incident management, disaster recovery and continuity planning are identified and ready?
7. Have Communications and Public affairs been sufficiently involved in the planning process and integrated as a key component?
8. Is senior management integrated and prepared for their role?
9. Is a suitable approach to testing and exercising been adopted?
10. Is the performance of the EM and BCP Program appropriately monitored and actively managed?
11. Does the organization have the tools, facilities and other resources to support EM and BCP functions?
12. *Is information security a subject that has appropriate attention within the EM and BCP Program?