Get the right questions into one place.

Before the first call

You do not need every item completed to get in touch. Use the gaps to identify what needs discussion. Checked items stay in this open page only; the website does not save or send them.

0 of 8 preparation items checked

Illustrated guide

• Name the decisionWrite the question that prompted the assessment and who needs the answer.
• Identify the systemsList the high-level services and systems the organization depends on. Do not include credentials.
• Map responsibilitiesIdentify the internal owner and the external provider for each important system.
• Collect existing requestsGather relevant partner, insurer, funder, or leadership questions.
• Find existing documentationLocate current policies, prior assessments, and incident plans. Note what is missing.
• Identify important accessDescribe the types of staff and vendor access that need discussion.
• Record constraintsNote staff availability, internal approval steps, and known dependencies.
• Choose the participantsIdentify who can authorize the scope and who can answer technical questions.

Keep the preparation at a high level. Share sensitive records only through a method agreed for the engagement.