THE FRAMEWORK
How the assessment works
The Planaletix BCP Readiness Assessment is a structured diagnostic instrument designed to evaluate an organization's preparedness to prevent, respond to and recover from disruptions that threaten critical business operations. The assessment provides a scored maturity profile across eight critical dimensions, benchmarked against GCC regional averages, with prioritized recommendations for improvement.
It examines the full lifecycle of business continuity management — governance, analysis (business impact analysis and risk assessment), strategy and plan development, implementation, exercising and testing, and continuous improvement.
The assessment is not a compliance audit. It is a strategic resilience evaluation that answers the question every board and executive team should be asking: "If a significant disruption occurred tomorrow, would we be ready?"
8 DIMENSIONS · 90 QUESTIONS
Explore the dimensions and maturity levels
WHO IT IS FOR
Built for the leaders accountable for resilience
The assessment is designed for the leaders accountable for keeping critical operations running through disruption:
- CEOs and Directors-General requiring evidence-based assurance of organizational resilience
- Chief Risk Officers and Risk Committee members evaluating BCP maturity against regulatory expectations
- CIOs and CTOs assessing IT disaster recovery alignment with business requirements
- COOs responsible for operational continuity and service delivery
- Business Continuity Managers and Coordinators seeking an independent assessment of programme maturity
- Board members and Audit Committees requiring assurance that BCP capabilities fit the current risk environment
- Government sector leaders responsible for national service continuity and NCEMA compliance
The assessment evaluates BCP readiness at the organizational level — the enterprise-wide capability, not a single business unit, facility or system. It applies to government entities, enterprises and large organizations across all sectors. It is sector-agnostic in structure but GCC-specific in calibration: benchmarks, risk examples and guidance are grounded in the Gulf operating environment.
STANDARDS ALIGNMENT
Mapped to the standards you are measured against
The framework draws from and aligns with international standards and frameworks:
- ISO 22301:2019 — Business Continuity Management Systems, the primary international BCM standard
- ISO 22313:2020 — guidance on the use of ISO 22301
- UAE NCEMA guidelines — business continuity requirements for UAE government and regulated entities
- NIST SP 800-34 Rev. 1 — Contingency Planning Guide, informing IT disaster recovery practice
- BCI Good Practice Guidelines 2018 — the Business Continuity Institute's professional practices
- Gartner Business Continuity Maturity Model — benchmarking reference for maturity stages
WAYS TO TAKE IT
Two ways to take the assessment
THE FRAMEWORK AT A GLANCE
Business Continuity: all 8 dimensions
- D1 BCP Governance & Leadership — 15%
- D2 Business Impact Analysis (BIA) — 15%
- D3 Risk Assessment & Threat Analysis — 15%
- D4 BCP Strategy & Plans — 15%
- D5 Crisis Management & Communication — 10%
- D6 IT Disaster Recovery — 10%
- D7 Testing, Exercises & Training — 10%
- D8 Continuous Improvement & Maturity — 10%
QUESTIONS
Frequently asked questions
What does the assessment cover?
Eight dimensions across the business continuity lifecycle: governance and leadership, business impact analysis, risk assessment, strategy and plans, crisis management and communication, IT disaster recovery, testing and training, and continuous improvement — 90 structured questions in total.
How is the score calculated?
Each dimension is scored on a five-level maturity scale and weighted into an overall score. If any dimension scores below 2.0, the Critical Threshold Rule caps overall maturity at Level 2.
Which standards does it use?
ISO 22301:2019 and ISO 22313:2020, UAE NCEMA guidelines, NIST SP 800-34, the BCI Good Practice Guidelines and the Gartner Business Continuity Maturity Model.
What do we receive?
An executive summary with priorities, a maturity profile, per-dimension findings, GCC benchmarking, and a 6–12 month action plan with the top five priorities, a capability roadmap, governance and operating-model and resourcing recommendations.
Online or with a consultant?
Take the online self-assessment (USD 3,500) or ask for a consultation assessment scoped to your organization. Contact info@planaletix.com for a consultation.