How would your incident response exercising look to an assessor?
Ten or so questions about how your organisation exercises its incident response plan, and what record exists. It takes about three minutes. You get the result on screen straight away, and no email is needed to see it.