This tool is a high-level self-assessment checklist for use by an auditee prior to a review of the business continuity management process. It gives the auditee an opportunity to inform internal audit about controls and processes they employ, and it also gives the auditee ideas about other controls and processes that may be appropriate.
In addition, this questionnaire can be used as follows:
- During the audit-planning phase to guide the creation of internal audit work programs
- During reviews as a checklist that will help you to quickly assess the types of internal controls being employed within a particular process
- As a training tool to educate new internal auditors about processes and their relevant controls