Incident Command Readiness Scorecard
Pillar Four
Incident Command Readiness Scorecard
Can your leadership make decisive calls and brief the board in 55 minutes?
Progress8 Questions
1
Command Structure
Is there a designated Incident Commander with clear authority?
Who can declare an incident and authorize emergency actions?
2
Pre-Authorized Decisions
Do you have pre-agreed emergency actions that execute immediately?
Isolations, failovers, shutdowns pre-approved by legal.
3
Board Communication
Can you deliver an executive brief within 55 minutes?
CFO/board-ready: impact, exposure, regulatory implications.
4
Authority Matrix
Is there a clear decision authority matrix?
Who approves comms, disclosures, ransom decisions?
5
Graceful Degradation
Have you pre-decided which services to disable first?
Priority lists eliminate decision paralysis.
6
Ambiguity Tolerance
How does leadership decide with incomplete information?
Real incidents are messy.
7
Stakeholder Comms
Do you have pre-approved templates for all audiences?
Drafting from scratch causes legal exposure.
8
Rehearsal Cadence
How often does your exec team do tabletops?
Executive decision-making exercises.
Your Incident Command Readiness
Based on 8 executive decision-making dimensions
Total Score
0
out of 24
Readiness Grade
–
–
Time to Executive Brief:—
Dimension Breakdown
Command Structure
–
Pre-Authorized Actions
–
Executive Brief
–
Authority Matrix
–
Graceful Degradation
–
Ambiguity Tolerance
–
Stakeholder Comms
–
Rehearsal Cadence
–