Ten questions. Two minutes. A quick board-level view of how prepared your organisation is for a serious cyber incident.
This is a practical self-assessment, not a formal security audit. Answer for your organisation as it operates today, not as policy says it should.