Test your BCM readiness
before the next disruption.
Answer 15 questions across all 5 BCM domains aligned to ISO 22301 and the SAMA BCM Framework. Get an instant maturity score, a scored domain breakdown, and a prioritised list of what to fix first — built by a team that has run BCM exercises across Saudi banking, energy, and government.
How prepared is your BCM programme for SAMA inspection?
15 questions across 5 control domains. One at a time. Keyboard-driven. You'll get an instant maturity score and a prioritised remediation roadmap in under five minutes.
What happens when you finish
Your full results are instant — score, domain breakdown and priority gaps, no email required. Optionally enter your email on the results screen to receive the report in your inbox.
See your overall BCM readiness percentage and where you sit on the maturity scale — Initial, Developing, Defined, or Managed.
Understand exactly which BCM domain is your biggest examination risk and which gaps are most likely to attract regulator findings.
Walk away with your top 3 gaps ranked by severity, with specific first steps you can act on before your next BCM examination cycle.
Ready to make resilience an asset, not a checkbox?
GRC Vantage has ISO 22301, SAMA BCM, NCA ECC, and PDPL controls pre-mapped. Run your BIA once, generate examination evidence everywhere.
BIA built into the platform
Capture critical processes, RTO/RPO, dependencies, and approvals in one workflow with version history and Board sign-off.
Exercise programme management
Schedule tabletops and live DR drills, capture observations, and auto-generate after-action reports examiners accept.
Continuous compliance
Evidence is captured as work happens — no last-minute scramble before SAMA examination or ISO certification audit.
Frequently asked questions
- Is the BCM assessment really free?
- Yes. No credit card, no sign-up to start, no commitment. Your full results — score, domain breakdown and priority gaps — appear immediately after the 15 questions. Optionally enter your email to receive the report in your inbox.
- Who is this assessment for?
- BCM Managers, Heads of Operational Resilience, CROs, IT Audit Managers, and GRC teams at Saudi banks, insurers, government entities, energy operators, and any organisation subject to ISO 22301 or SAMA BCM expectations.
- How is the score calculated?
- Each of the 15 questions has 4 maturity-level options scored 0–3. Domain scores are calculated as percentages of the maximum possible score. Overall score is the weighted average across all five domains, mapped to a four-tier maturity label.
- Does the assessment cover SAMA BCM specifically?
- Yes. The questions are written so each one maps to both an ISO 22301 clause and a SAMA BCM Framework subdomain. You'll see citations like 'ISO 22301 cl. 8.2.2 and SAMA BCM 2.4' in the per-question rationale.
Run another readiness assessment
Score your maturity against the other Saudi frameworks — same conversational format, same instant results.
NCA ECC Readiness
Score your cybersecurity maturity across the four NCA ECC-2:2024 domains.
Start AssessmentNCA CSCC Readiness
Score your critical-systems protection against the NCA CSCC overlay.
Start AssessmentSAMA CSF Readiness
Score your cybersecurity maturity against the Saudi Central Bank Cyber Security Framework.
Start AssessmentSAMA IT Governance
Score your IT governance maturity against the SAMA IT Governance Framework.
Start AssessmentSAMA Third-Party Risk
Score your outsourcing maturity against the SAMA Outsourcing Regulations.
Start AssessmentPDPL Readiness
Score your privacy programme against the Saudi Personal Data Protection Law.
StartStart your BCM assessment now — it takes under 5 minutes.
Free. Instant results. No commitment. Built for BCM and operational resilience teams across Saudi banking, insurance, energy, and government.
Take the assessment