Are the furniture and office preparations made from combustible material?
Are there dangerous activities in the surroundings of the building?
Are there fire alarm systems and smoke detectors installed?
Are there clear alarm triggers deployed within the building?
Do the fire alarm systems and smoke detectors go through periodical testing andmaintenance?
Are there sprinklers deployed across the building?
Are there fire extinguishers deployed over all locations in the building?
Do the deployed fire extinguishers go through periodical maintenance?
Is smoking and cooking allowed in the building? Is there a smoking room? Areashtrays available?
Do computer rooms and data centers have their own fire alarm and suppressingsystems?
Are there evacuation plans in place?
Are there multiple exits to the building?
Have the evacuation plans been communicated to employees?
Have the evacuation plans been tested in the past 12 months?
Have the employees been trained in first aid and fire fighting?
Are important documents held in fire-resistant safes and vaults? What are theirratings?
Are data tapes and backup media stored off site in vaults and safes?
Is there a 24/7 manned control and surveillance room?
Is there a hotline or known number to report fire in the building? Is this numbercontinuously communicated?
Are water storage units and supplies adequate for fire fighting?
Have there been major fire incidents before? What were their root causes? Havethese root causes been rectified?
Critical areas affected
<List the critical assets or processes that will be affected if the risk materializes>
Risk probability rating
Low/medium/high
Risk impact rating
Low/medium/high
Risk rating (probability x impact)
Risk
Flooding/water leakage/severe weather conditions
Consideration points
Is the building close to rivers, water streams, and main water pipes?
Does the area suffer from heavy storms, high rainfall, or seasonal floods?
Does the surrounding environment have good sewage and drainage systems?
Are the building walls, floors, ceilings, and basement well isolated against waterleakage?
Is the computer room or data center located in the basement or on the groundfloor?
Does the computer room or data center have a raised floor?
Is the archiving room located in the basement or on the ground floor?
Does the archiving room have a raised floor?
Are electrical wiring and cables placed on specific trays and paths?
Is the computer room or data center equipped with fluid detection sensors andalarms?
Have there been serious flooding/water leakage incidents in the past? Were theroot causes defined? Were they rectified?
Critical areas affected
<List the critical assets or processes that will be affected if the risk materializes>
Risk probability rating
Low/medium/high
Risk impact rating
Low/medium/high
Risk rating (probability x impact)
Risk
Earthquake/strong vibrations
Consideration points
Is the area known for having seismic activity? How frequently do earthquakeshit?
Does the surrounding area contain activities that generate strong vibrations likemining and heavy industries?
Is the building designed to resist earthquakes? Does it have dampers?
How many floors/stories does the building have?
Is the computer room located on the ground, middle, or higher floors?
Are safe areas within the building defined and known to people?
Does the surrounding environment contain high-rise or smaller buildings? Doesit contain parks, parking lots, courts, or open spaces where people canassemble?
Critical areas affected
<List the critical assets or processes that will be affected if the risk materializes>
Risk probability rating
Low/medium/high
Risk impact rating
Low/medium/high
Risk rating (probability x impact)
Risk
Pandemics/virus or bacteria outbreak
Consideration points
Has the area, or other close areas, been reported to have confirmed cases ofinfection?
Are there hospitals in the surrounding areas?
Do you have disinfectant and hygiene equipment installed in the public areaslike toilets, restaurants, entries and exits?
Do you have succession plans in place?
Are workplaces organized as open spaces or separate offices?
Are toilets, smoking rooms, cafeterias, and gathering areas shared or isolated?
Is there a procedure in place for isolating contaminated areas?
Are there related awareness materials and messages issued to employeesregarding avoiding and protecting themselves from infection?
Is there a hotline for reporting suspected cases or outbreaks?
Are there alternative locations to use in case original locations are closed fordisinfection?
Are remote access solutions deployed?
Are there arrangements for an alternative workforce from outsourcing vendors?
Critical areas affected
<List the critical assets or processes that will be affected if case the risk materializes>
Risk probability rating
Low/medium/high
Risk impact rating
Low/medium/high
Risk rating (probability x impact)
Risk
Disgruntled employees/high employee turnover/insufficient number of employees/low employee morale
Consideration points
Are there procedures for measuring employees’ satisfaction periodically?
Are there procedures for managing disgruntled employees?
Are there open communication channels between employees andmanagement?
Is there a root cause analysis for high turnover ratios?
Are there procedures for knowledge transfer?
Are there talent management, pooling, and distribution policies in place?
Are there well-documented procedures in place?
Is there proper capacity planning for the human resources needed?
Are vacation policies and plans enforced?
Are there succession planning policies in place? Are they enforced?
Are there policies for job rotation and cross-training in place? Are they enforced?
Does the management have active employee participation and morale lifting/loyalty enhancement programs in place?
Critical areas affected
<List the critical assets or processes that will be affected if the risk materializes>