Are your business assets adequately protected?
Is your customer and business data adequately protected?
Do you have regulatory requirements around business continuity, data recovery, and privacy?
What is the appropriate level of protection?
Can you recover if your business or data is disrupted?
Are you adequately protected against the latest technology threats and are your employees informed what those threats are?
What is the appropriate level of spending for the assets you are protecting?