1. Does your company have a dedicated B/C function?

yes 429 82%

no 93 18%

2. Does your company have a separate Y2k Program Office (PO)?

yes 406 78%

no 116 22%

3. Is your B/C function handling the Y2k project?

yes 118 23%

no 186 36%

partially 218 42%

4. Where does B/C and Y2k PO reside?

BCP % Y2k %

Information Systems 272 52% 306 59%

Finance 68 13% 61 12%

Risk Management 88 17% 56 11%

Audit 54 10% 40 8%

Other 127 24% 102 20%

Don’t know 70 13% 84 16%

5. How large is your company’s dedicated staff today?

No staff (employee or contractor) 37 7% 37 7%

1- 5 staff (employee or contractor) 257 49% 124 24%

6- 10 staff (employee or contractor) 45 9% 46 9%

10 or more (employee or contractor) 128 25% 221 42%

Don’t know 49 9% 81 16%

No selection made 6 1% 13 2%

6. What is your company’s annual budget?

Under $1 million 166 32% 105 20%

$1-5 million 68 13% 52 10%

$6-10 million 22 4% 26 5%

$11 million or higher 89 17% 89 17%

Don’t know 172 33% 225 43%

No selection made 5 1% 25 5%

7. Does your company currently use outside consulting resources?

No, never 109 21% 93 18%

No, but we have in the past 98 19% 31 6%

No, but we plan to in the next 4 months 20 4% 6 1%

Yes, and currently < 5 resources 153 29% 125 24%

Yes, and currently > 5 resources 78 15% 120 23%

Don’t know 54 10% 128 25%

No selection made 10 2% 19 4%

8. What is your company’s primary business?

Health care 29 6%

Retail 13 2%

Education 14 3%

Government / Military 57 11%

Banking / Finance / Insurance 158 30%

Utility / Transportation / Communications 69 13%

Manufacturing / Industrial / Wholesaler 43 8%

Computer/ Network Equipment Mfg. 28 5%

Technology Services 70 13%

Professional Services 59 11%

Other 61 12%

9. What is your company’s annual revenue?

Under $500 million 115 22%

$501 million - $1 billion 55 11%

$1 billion - 10 billion 108 21%

$11 billion or higher 152 29%

Don’t know 92 18%

10. Which Y2k exposures is your program addressing? (Check all that apply)

Information systems applications (software) 428 82%

Information systems infrastructure (hardware) 393 75%

"Beyond-IS" Exposures

Embedded systems

(manufacturing process control) 173 33%

Embedded systems (building and facility) 254 49%

Embedded systems (products we produce) 178 34%

Customers

(ability to receive our product / services) 248 48%

External Suppliers

(ability to deliver critical supplies to us) 261 50%

Don’t know 81 16%

11a. Regarding Information Systems, your current status, is:

Done nothing 12 2%

Identifying software & hardware inventory 39 7%

Performing business impact analysis 21 4%

Performing exposure risk assessments 19 4%

Developing mitigation & contingency strategies 71 14%

Completing mitigation activities 79 15%

Writing contingency plans 148 28%

Already Year 2000 compliant 65 12%

Don’t know 62 12%

No selection made 6 1%

11b. Regarding Information Systems, your program: (check only one)

Will be completed before 01/01/2000 455 87%

Will not be completed before 01/01/2000 31 6%

No selection made 36 7%

12a. Regarding "Beyond-IS" exposures, your current status is:

Done nothing 28 5%

Identifying exposure inventory 31 6%

Performing business impact analysis 30 6%

Performing exposure risk assessments 31 6%

Developing mitigation & contingency strategies 61 12%

Completing mitigation actives 57 11%

Writing contingency plans 122 23%

Already Year 2000 compliant 44 8%

Don’t know 109 21%

No selection made 9 2%

12b. Regarding "Beyond-IS", your program: (check only one)

Will be completed before 01/01/2000 392 75%

Will not be completed before 01/01/2000 51 10%

No selection made 79 15%

13. Which function has responsibility for: (Check one, both or neither

for each line below)

Only Only

Year 2000 awareness training? 46 273 68 135

Data collection (exposure inventory)? 115 154 88 165

Business impact analysis? 230 54 91 147

Exposure risk assesment? 192 73 95 162

Risk reduction strategy recommendations? 173 60 100 189

Contingency planning review? 258 35 82 147