Your best bet would be to visit sites like knowledgeleader and infotech, they have tons of documentation andtemplates with questionnaires. Here's an example: This is the final section of a thirteen part mainframe data center general controls questionnaire. The questionnaire covers the following areas: • Organization and Management • Computer Operations • Physical Security • Environmental Controls • Program, Data File and Transaction Security • Security Administration • Applications Systems Development and Maintenance • Systems Software Support • Vendor Support • Data Base Administration • Hardware and Software Inventory Management • Telecommunications • Continuity of Operations Operations continuity deals with the notion that a business should be able to survive even if a disastrous event occurs. Rigorous planning and commitment of resources is necessary to adequately plan for such an event. Contingency planning is the primary responsibility of senior management as they are entrusted with the safeguarding of both the assets of the company and the viability of the company. This part of the questionnaire covers the following continuity of operations topics: The Disaster Recovery Plan (DRP) 2 Critical Applications 3 Backup 3 Testing 3 Insurance 4 The Disaster Recovery Plan (DRP) 1.