Do you have Internet Service Provider (ISP) redundancy?

This question is asking whether your organization has multiple Internet Service Providers (ISPs) to ensure continuous internet connectivity even if one provider experiences an outage. In a security assessment context, ISP redundancy is important because it directly impacts the availability aspect of the CIA triad (Confidentiality, Integrity, Availability). If your organization relies on cloud services, SaaS applications, or needs to maintain continuous external connectivity for your customers or employees, a single ISP failure could cause significant business disruption. ISP redundancy typically involves: 1. Having contracts with two or more different ISP providers 2. Implementing automatic failover mechanisms between these providers 3. Ensuring the ISPs use different physical infrastructure (different entry points to your facility, different backbone networks) When answering this question, you should clearly state whether you have ISP redundancy, how many providers you use, whether they're truly independent (different physical infrastructure), and how failover works. If you have partial redundancy (e.g., at some locations but not others), be specific about where redundancy exists and where it doesn't.