BSG Business Resource 001

Is your technology fit for your business?

The BSG VITAL Technology Health Check

This practical health check guides you through the five interconnected areas of the BSG VITAL Technology Framework, helping you recognise strengths, identify areas of uncertainty and decide what deserves attention next.



Business Resource 001



Approx. 12 min read



For business leaders



Last reviewed July 2026

What you'll gain

See what’s working, uncover what isn’t – and prioritise what to do next

Technology can appear to be working while still creating friction, uncertainty or avoidable risk. Recurring problems can become accepted as normal, responsibilities may be assumed rather than confirmed, and systems may remain in place long after the organisation has outgrown them.

The BSG VITAL Technology Health Check helps you step back from individual devices and day-to-day issues to consider the bigger picture, identify what most deserves your attention and prioritise the next steps that will make the greatest difference.



Assess the five VITAL areas

Consider your organisation across the five interconnected areas that shape technology fitness.

Recognise strengths and uncertainty

See where your foundations appear strong and where important questions remain.

Uncover hidden friction

Identify recurring frustrations, unclear responsibilities and hidden dependencies.



Focus on three priorities

Choose the three areas that matter most – not an overwhelming list of possible improvements.

Ask better questions

Have more useful conversations with your leadership team, IT team or technology provider.



Identify a sensible starting point

Decide what deserves attention next – without assuming every issue requires a new solution.

A practical business health check. This is a business-level health check – not a technical audit, security certification or guarantee of compliance. Its purpose is to help you recognise where confidence is justified, where greater clarity may be valuable and what deserves further attention.

A better question

Working technology is only the baseline

Technology is often judged by a seemingly straightforward question: is it working?

It is an understandable place to start – but it only tells us whether technology appears to be functioning at this moment. It does not tell us whether it is reliable, secure, resilient or still suited to what the organisation requires.

Technology influences much more than whether employees can switch on a device or access a system. It shapes how productively people work, how reliably customers are served, how information and access are protected, how the organisation responds to disruption and how confidently leaders can plan and invest.

The goal is not to have the newest, most complex or most expensive technology. It is to have technology that is appropriate for the organisation it serves.

THE USUAL QUESTION:

Is our IT working?

A useful operational question – but only a snapshot of whether technology is functioning right now.

THE LEADERSHIP QUESTION:

Is our technology appropriate for what the organisation depends upon, what it needs today and where it is going?

A broader question that considers fitness, risk, resilience and future direction.



A moment to consider

Where does technology currently make your organisation easier to run – and where does it make work harder than it needs to be?

The BSG VITAL Technology Framework

The BSG VITAL Technology Framework:
Five interconnected areas of technology fitness

Technology is not simply a collection of devices, systems, licences and support tickets. It is an operational business asset – and its value depends on whether it is understood, reliable, protected, recoverable and aligned with what the organisation needs.

The BSG VITAL Technology Framework brings these considerations together into five interconnected areas, helping business leaders take a broader and more structured view of technology fitness.

Visibility

Do we understand what the business depends upon?
A clear view of the systems, information, suppliers, responsibilities and dependencies that support the business.

Integrity & Reliability

Does technology operate consistently and support productive work?
Reliable technology performs as intended, while recurring problems and avoidable friction are properly addressed.

Threat Protection

Are our systems, information and people appropriately protected?
Practical safeguards, informed behaviours and clear responsibilities help reduce the likelihood and impact of security incidents.

Availability & Resilience

Could the business continue and recover following disruption?
Effective resilience considers what happens when something important becomes unavailable – and whether recovery arrangements work in practice.

Leadership & Direction

Is technology guided by clear business priorities and future needs?
Technology decisions should reflect business plans, expected change, investment priorities and the outcomes the business is trying to achieve.

Why the five areas form a cycle

The five areas are connected rather than independent. Limited visibility makes it harder to improve reliability, protect what matters, prepare for disruption or make well-informed plans.

Technology decisions and business changes can introduce new systems, suppliers, working practices, dependencies and risks. These changes must then become visible and understood, returning the organisation to the beginning of the cycle.

Technology fitness is not a one-off achievement or a perfect score. It is a continuing management cycle: understand, support, protect, prepare, align – and review again as the organisation changes.

Your BSG VITAL Technology Health Check

Build a clearer picture of your business' technology health

Consider each statement from the perspective of the organisation as a whole. You do not need detailed technical knowledge to complete the health check. What matters is whether your organisation can answer confidently, identify who is responsible and explain how it knows.

For each statement, choose the response that most accurately reflects your organisation’s current position:

Confident

We know this is appropriately addressed and could explain or evidence it.

Some uncertainty

Something is in place, but we are not fully certain how effective, current or complete it is.

Needs attention

This is absent, unsuitable or already known to be causing concern within the business.

Not known

We do not currently have enough visibility or verified information to answer confidently.

“Not known” is not a neutral answer. It may reveal that the business is relying on an assumption rather than verified information.

You do not need to calculate a total score. Instead, keep a simple note of any statements that create uncertainty, reveal a weakness or prompt an important question. You will use these observations later to build your VITAL Profile and identify three priorities.



As you work through the health check, keep a note of anything you cannot confidently answer.

V · I · T · A · L

V – Visibility

Can your business clearly see and understand the technology, information, suppliers and dependencies it relies on?

Why visibility matters

Important technology decisions become difficult when business leaders cannot see the whole picture. Gaps in documentation, unclear responsibilities or dependence on knowledge held by one person can remain unnoticed while everything appears to be running normally.

Clear visibility helps the business understand what it relies on, who is responsible and where greater certainty may be needed.

Assess your current position

For each statement below, choose the response that most accurately reflects your business today. Keep a note of any statement you cannot answer confidently.



Response options: Confident · Some uncertainty · Needs attention · Not known

Business leaders have a clear, non-technical view of the important systems, services, suppliers and dependencies the business relies on.

Responsibility for technology decisions, security, user access and supplier management is clear and understood.

Important systems, devices, accounts, licences, contracts and renewal dates are documented and kept current.

Important knowledge is documented and accessible, rather than being held only by one employee or supplier.

Business leaders can obtain clear, current information about technology risks, performance, costs and priorities.

Changes to systems, suppliers or working practices are recorded and reflected in the business’s technology information.

What did you notice?

Which statements were difficult to answer confidently?

Consider whether your answers relied on assumptions, knowledge held by another person or information you could not readily access. Make a note of anything you may need to clarify or investigate.

V · I · T · A · L

I – Integrity & Reliability

Can your business rely on its technology and information to remain accurate, properly maintained and fit for purpose?

Why integrity and reliability matter

Technology does not need to stop working completely to affect a business. Recurring faults, inconsistent performance, ageing equipment or poorly controlled changes can gradually reduce productivity and confidence while becoming accepted as part of everyday work.

Reliable technology is appropriately maintained, supported and reviewed. Its information and configurations remain accurate, and recurring problems are addressed at their cause rather than repeatedly worked around.

Assess your current position

For each statement below, choose the response that most accurately reflects your business today. Keep a note of any statement you cannot answer confidently.



Response options: Confident · Some uncertainty · Needs attention · Not known

Important systems and devices perform consistently, without recurring faults, unexplained disruption or persistent workarounds.

Technology is routinely maintained, updated and reviewed rather than receiving attention only when something goes wrong.

Ageing, unsupported or unsuitable technology is identified early and addressed through a planned replacement or improvement process.

Changes to systems, configurations and user access are properly authorised, tested where appropriate and documented.

Important business information is accurate, consistent and protected against unintended alteration, duplication or loss of quality.

Recurring technology issues are investigated at their underlying cause, with lessons and improvements carried forward.

What did you notice?

Where has your business become accustomed to unreliable technology, recurring problems or temporary workarounds?

Consider whether any issue is being repeatedly managed rather than properly resolved, or whether important maintenance and replacement decisions are being postponed. Make a note of anything that may require closer review.

V · I · T · A · L

T – Threat Protection

Are your systems, information and people appropriately protected against the threats most relevant to your business?

Why threat protection matters

Effective protection does not come from one product, policy or annual exercise. It depends on appropriate layers of security, clear responsibilities, reliable processes and people who know how to respond when something does not look right.

Threats, technologies and business obligations continually change. Protection therefore needs to be actively maintained and reviewed – not simply introduced once and assumed to be working.

Assess your current position

For each statement below, choose the response that most accurately reflects your business today. Keep a note of any statement you cannot answer confidently.



Response options: Confident · Some uncertainty · Needs attention · Not known

Important accounts and systems use appropriate access controls and multifactor authentication wherever it is needed.

Access is reviewed and updated promptly when people join the business, change responsibilities or leave.

Devices, software and security protections are maintained, monitored and kept current across the business.

Employees receive practical guidance and know how to recognise and report suspicious activity or potential security incidents.

Security alerts, vulnerabilities and suspected incidents have clear ownership and are investigated and addressed appropriately.

Leadership understands the business’s most relevant cyber and information risks, and reviews whether its protections remain appropriate as circumstances change.

What did you notice?

Which protection measures are you relying upon without being certain they are configured, monitored or used effectively?

Consider whether any important safeguard is assumed to be working, depends heavily on one person or has not been reviewed as the business and its risks have changed. Make a note of anything that may require verification or closer attention.

V · I · T · A · L

A – Availability & Resilience

Could your business continue operating and recover effectively if important technology or information became unavailable?

Why availability and resilience matter

Backups, cloud services and support arrangements can provide reassurance – but resilience depends on understanding what is and is not protected, what can actually be recovered, how long recovery will take and whether people know what to do when normal systems are unavailable.

Disruption may result from a cyber incident, technology failure, human error, supplier outage or physical event. A resilient business understands what is most critical, prepares practical alternatives and tests whether its recovery arrangements will work when needed.

Assess your current position

For each statement below, choose the response that most accurately reflects your business today. Keep a note of any statement you cannot answer confidently.



Response options: Confident · Some uncertainty · Needs attention · Not known

The systems, information and services most critical to the business have been identified and prioritised.

The business understands which important data and systems are included within its backup arrangements, which are not, and whether appropriate protection is in place across on-premises, hosted and cloud-based services.

Backup failures are monitored and addressed, and important data and systems have been successfully restored through testing.

Responsibilities, communication routes and first actions are clear if systems become unavailable or a cyber incident occurs.

The business understands how long its important services could be unavailable and how much information it could lose before the impact becomes unacceptable.

Dependencies on key suppliers and technology have been considered, with practical alternatives or continuity arrangements in place where appropriate.

What did you notice?

If an important system became unavailable tomorrow morning, what might your business discover too late?

Consider whether there are gaps in what is backed up, recovery arrangements that have not been tested, knowledge held by one person or support arrangements whose scope and response expectations are not clearly understood. Make a note of anything that could delay recovery or leave people unsure what to do.

V · I · T · A · L

L – Leadership & Direction

Is technology being guided by clear business priorities, informed leadership and a realistic view of future needs?

Why leadership and direction matter

Technology decisions create greater value when they begin with what the business is trying to achieve. Without clear direction, replacements become urgent, costs arrive unexpectedly and systems can constrain change rather than support it.

Effective leadership does not require detailed technical knowledge. It requires clear priorities, proportionate planning and advice that helps decision-makers understand the risks, costs, practical implications and business value of their choices.

Assess your current position

For each statement below, choose the response that most accurately reflects your business today. Keep a note of any statement you cannot answer confidently.



Response options: Confident · Some uncertainty · Needs attention · Not known

Business plans, operational priorities and anticipated changes actively inform technology decisions.

Known equipment, software, licensing and infrastructure needs are anticipated, prioritised and budgeted for wherever reasonably possible.

Technology proposals are evaluated against the outcomes they should support, rather than features or immediate cost alone.

The business has a small number of clear, proportionate technology priorities, with ownership and appropriate next steps understood.

Leadership receives advice that considers risk, usability, cost, timing and the business’s capacity to implement and manage change.

Existing systems, tools and licences are reviewed to ensure they remain suitable and are being used effectively before further technology is purchased.

What did you notice?

What planned change or business priority could your current technology struggle to support?

Consider whether upcoming growth, new ways of working, regulatory obligations, service changes or ageing technology may create needs that have not yet been fully anticipated. Make a note of any decision that would benefit from earlier planning or clearer advice.

Continue the cycle

Return to Visibility

Leadership and direction are not the end of the BSG VITAL framework. Every decision can introduce new systems, suppliers, responsibilities and dependencies.

As plans become action, return to Visibility: understand what has changed, confirm whether it is working as intended and identify what now deserves attention. In this way, BSG’s VITAL framework becomes an ongoing cycle of understanding, strengthening and improving the technology your business depends upon.

Understand your findings

Create your five-area VITAL summary

Your VITAL summary brings together what you found across the five areas. It helps you see where the business appears to have a stronger foundation, where important uncertainty remains and where closer attention may be needed.

Review your responses in each VITAL area and decide which of the three positions below describes it most accurately. Choose one overall position for each area and note the most important finding that influenced your decision.

Choose one position for each VITAL area

Use the guidance below to decide which position best reflects your findings in each area. You may use the same position more than once. Consider the significance of what you identified – not simply the number of confident or uncertain answers.

Stronger foundation

Choose this where answers are generally confident and supported by current information, appropriate evidence or clear ownership – and you have not identified a concern that could materially affect the business.

Note what is working well and should be maintained or reviewed periodically.

Some uncertainty

Choose this where important answers rely on assumptions, incomplete information or arrangements that have not recently been confirmed.

This does not necessarily mean something is wrong. Note what should be checked, clarified or supported by better evidence.

Greater attention recommended

Choose this where you identified an issue that could materially affect security, reliability, recovery or the business’s ability to operate and develop.

One significant concern may justify this position even where several other answers were confident.

Record your five-area summary

Assign one overall position to each VITAL area. Alongside it, note the most important strength, uncertainty or concern that influenced your decision.

You can write your summary in your notes, print this page or use the structure below as the basis for a leadership or provider discussion.

BSG VITAL area

Your overall position

Most important finding

V – Visibility