Turn the snapshot into a maturity level for each of the five sub-domains, so the resilience work becomes measurable.
For each sub-domain, read the five levels and record the one that most closely matches your current state. Most businesses are crossing the line between Level 2, aware, and Level 3, capable.
Level 1: risks unexamined. Level 2: vaguely aware, not assessed. Level 3: risks identified and assessed by likelihood and impact. Level 4: thorough, prioritized risk picture. Level 5: proactive risk intelligence.
Level 1: total dependence on one or two people. Level 2: aware, nothing distributed. Level 3: critical knowledge and relationships distributed. Level 4: low key-person risk, backups in place. Level 5: a genuinely resilient, distributed team.
Level 1: dangerous single-source concentration. Level 2: concentrated, undiversified. Level 3: diversifying, no single existential dependence. Level 4: well-diversified and monitored. Level 5: structurally robust to any single loss.
Level 1: no plans, pure improvisation. Level 2: vague intentions. Level 3: continuity and contingency plans in place and tested. Level 4: rehearsed, maintained plans. Level 5: crisis-ready as a matter of course.
Level 1: no buffers, no monitoring, brittle. Level 2: minimal slack, unwatched. Level 3: buffers built, risk monitored on a cadence. Level 4: strong resilience, actively managed. Level 5: antifragile, thrives on volatility.
Carry all five scores into the Structural Risk Constraint Map to find the one holding back the others.
Your answers stay in your browser on this page and are never sent anywhere.