Test your
BCM readiness
before the next disruption.
Answer 15 questions across all 5 BCM domains aligned to ISO 22301 and the SAMA BCM Framework. Get an instant maturity score, a scored domain breakdown, and a prioritised list of what to fix first — built by a team that has run BCM exercises across Saudi banking, energy, and government.
15 questions, one at a time, with keyboard-friendly auto-advance — Typeform-style.
Governance, BIA, Recovery, Exercising, and Continuous Improvement — all benchmarked.
Every question maps to a specific clause or SAMA BCM expectation examiners verify.
Walk away with your top 3 gaps ranked and actionable first steps.
How prepared is your BCM programme for SAMA inspection?
15 questions across 5 control domains. One at a time. Keyboard-driven. You'll get an instant maturity score and a prioritised remediation roadmap in under five minutes.
What happens after you complete the assessment?
Your results are instant. You can also receive a personalised report reviewed by a veteran Head of IT Audit — with two decades of SAMA examination experience.
Instant maturity score
See your overall BCM readiness percentage and where you sit on the maturity scale — Initial, Developing, Defined, or Managed.
Domain-by-domain breakdown
Understand exactly which BCM domain is your biggest examination risk and which gaps are most likely to attract regulator findings.
Prioritised remediation plan
Walk away with your top 3 gaps ranked by severity, with specific first steps you can act on before your next BCM examination cycle.
Related on GRC Vantage
Continue your BCM programme journey with deeper guidance on the platform, the framework family, and adjacent assessments.
Business Continuity Management
The full GRC Vantage BCM module — BIA, DR, crisis playbooks, exercise scheduling.
SAMA BCM Framework
Saudi Central Bank business continuity expectations, mapped one-to-one to platform controls.
NCA ECC Readiness
Score your cybersecurity maturity across 5 NCA ECC domains — same conversational format.
Ready to make resilience an asset, not a checkbox?
GRC Vantage has ISO 22301, SAMA BCM, NCA ECC, and PDPL controls pre-mapped. Run your BIA once, generate examination evidence everywhere.
BIA built into the platform
Capture critical processes, RTO/RPO, dependencies, and approvals in one workflow with version history and Board sign-off.
Exercise programme management
Schedule tabletops and live DR drills, capture observations, and auto-generate after-action reports examiners accept.
Continuous compliance
Evidence is captured as work happens — no last-minute scramble before SAMA examination or ISO certification audit.
Frequently asked questions
Is the BCM assessment really free?
Yes. No credit card, no sign-up to start, no commitment. You receive your full maturity score and gap analysis immediately after the 15 questions.
Who is this assessment for?
BCM Managers, Heads of Operational Resilience, CROs, IT Audit Managers, and GRC teams at Saudi banks, insurers, government entities, energy operators, and any organisation subject to ISO 22301 or SAMA BCM expectations.
How is the score calculated?
Each of the 15 questions has 4 maturity-level options scored 0–3. Domain scores are calculated as percentages of the maximum possible score. Overall score is the weighted average across all five domains, mapped to a four-tier maturity label.
Does the assessment cover SAMA BCM specifically?
Yes. The questions are written so each one maps to both an ISO 22301 clause and a SAMA BCM Framework expectation. You'll see citations like 'ISO 22301 cl. 8.2.2 and SAMA BCM' in the per-question rationale.