Appendix E — Community resilience checklist Confidentiality This is a governance checklist, not

Appendix E — Community resilience checklist Confidentiality This is a governance checklist, not a public security assessment. Mark sensitive findings in a separate protected system and share only with authorized people.

DOMAIN MINIMUM QUESTIONS STATUS / OWNER / DATE Governance decision lead + alternates board oversight authority thresholds ☐ ☐ ☐ ☐ budget insurance/legal review ☐ Safeguarding children/vulnerable adults mandated reporting consent/confidentiality ☐ ☐ ☐ referral sheet ☐ Risk review qualified assessment incident trends events/calendar privacy ☐ ☐ ☐ ☐ ☐ accessibility annual update ☐ Emergency plan local authorities communication life safety/accountability medical ☐ ☐ ☐ ☐ reunification recovery ☐ ☐ Access/welcome consistent rules trained greeters behavior escalation ☐ ☐ ☐ ☐ disability/language access no profiling ☐ Digital/cyber MFA/admin control backups website/alert continuity doxxing route ☐ ☐ ☐ ☐ vendor review data minimization ☐ ☐ Reporting incident form secure evidence police/platform/institution routes ☐ ☐ ☐ ☐ follow-up aggregate review ☐ Continuity worship education pastoral care records/payroll alternate ☐ ☐ ☐ ☐ ☐ venue/channel supplies ☐ Communications holding lines spokesperson family/participant channels media ☐ ☐ ☐ ☐ ☐ translations corrections ☐ Recovery medical/mental-health spiritual legal/financial memorial consent ☐ ☐ ☐ ☐ ☐ long-term follow-up ☐ Mutual aid reciprocal host translation transport small-community support ☐ ☐ ☐ ☐ ☐ first responder/ally contacts Training/exercises role-specific announced/trauma-aware accessible after-action ☐ ☐ ☐ ☐ ☐ corrective closure Corrective-action register PRIORITY GAP RISK / IMPACT ACTION OWNER DUE VERIFIED / DATE Public-safe readiness statement “Our institution maintains an all-hazards safety and continuity program, coordinates with qualified local partners, trains staff and volunteers, supports accessibility, and reviews incidents and exercises.

We do not publish operational details. Report immediate danger to local emergency services and nonemergency concerns through: [LOCALIZE].” Source trail: CISA self-assessment