Yes No Plan- ned Action required/ measures Are findings from exercises incorporated into
training concepts?
Is a crisis communication system in place
(information to employees, points of contact for
authorities and the media)?
Are there provisions for psychological care of
affected personnel in the event of security
incidents?
Outside the company Is there a so-called disaster communication line
(priority line for specific telecommunications)?
Is security managed exclusively by the company
itself?
If not, do contractors/external security providers
comply with DIN 77200 Level 3?
Has this system proven effective from the point
of view of the company's management?
Are there agreements in place between the
company and security providers (contractual
arrangements, practical cooperation, areas of
responsibility in the event of crises)?
Are the security personnel familiarised with the
specific situation at the company and do they
receive ongoing training?
Has the critical nature of outsourced services
been assessed in terms of the company's
functionality?
- 71 -
Yes No Plan- ned Action required/ measures Are open sources which could pose a threat to
the company (e.g. aerial photographs on the
internet, production materials and quantities,
distribution channels etc.) avoided?
Further protection measures
