Executive dashboard
Resilience evidence snapshot
Board attention required
Suggested next decisions
Step 1
Organisation and mandate
Step 2
Critical business services
Start with services whose disruption would affect revenue, customers, safety, regulation or reputation. This anchors the evidence pack in business impact rather than control theatre.
Step 3
Controls and evidence
Capture the control, owner, implementation state, evidence source and framework mapping. Strong evidence names specific artefacts, tickets, reports, tests, screenshots or attestations.
Step 4
Supplier and dependency resilience
Step 5
Incident and recovery exercises
Step 6
Risk register
Step 7
90-day action plan
Generated output