Manifestly: A Checklist App for Teams

Business Continuity Checklist

Risk Assessment & Threat Identification

Inventory critical NPI systems and data flows

Score insurance-sector threats in the risk register

Map vendor concentration for core platforms

Verify alignment with the NAIC Model Law risk assessment

Submit the risk register for CISO approval

Business Impact Analysis

Catalog critical functions across underwriting and claims

Set RTO and RPO targets for each critical function

Map regulatory deadlines that drive RTO targets

Interview business owners on upstream dependencies

Publish the BIA report

Emergency Response Plan

Define crisis-management team roles and authorities

Document the 72-hour DOI notification workflow

Establish alternate FNOL intake channels

Run a tabletop exercise with claims and underwriting leads

Document the remediation plan for tabletop gaps

Schedule the annual plan review

IT and Data Recovery

Validate backups of PolicyCenter and ClaimCenter

Test failover for the agency management system

Verify MFA on recovery infrastructure per Part 500.12

Confirm SOC 2 Type II coverage for DR vendors

Request updated SOC 2 reports from vendors

Run a quarterly recovery drill

Communication and Coordination

Maintain the producer, carrier, and reinsurer contact directory

Draft DOI, policyholder, and reinsurer notification templates

Coordinate the call tree across CSRs and adjusters

Brief the reinsurance program manager on plan updates

Capture executive sign-off on the plan

Free Checklist Templates for Nydfs Part 500