Check whether your organization remains operational during a total IT outage (e. g. ransomware) — based on the BCM requirements under § 30 BSIG.
It's Monday morning, 7:03 a.m. No system boots up. Every screen shows a ransom demand. Email, ERP, telephony — everything encrypted. Your backups are affected too. How operational are you right now?