|
The primary purpose of testing is to ensure that the strategies, plans and
procedures that have been put in place are fully understood by all concerned and are fit for purpose on an
ongoing basis.
Testing is especially designed to identify problem areas, and so the success
of a test cannot be judged solely through whether it worked exactly according to plan.
The success of a test can be measured by the value which is gained from its
performance, particularly in the area of problem identification and resolution.
The objectives of testing and exercising are to ensure that:-
-
All staff are fully aware of their recovery responsibilities and
duties;
-
Staff training has been adequate
-
All necessary recovery resources are available as detailed in the recovery
plans
-
All essential supplies can be obtained as anticipated
-
All documentation has been kept current and reflects current arrangements
and procedures
-
Bottlenecks, uncertainties, and unreliable procedures are identified and
resolved prior to any recovery incident
-
Alternate facilities to be utilised in a recovery meet all requirements;
and
-
senior management are comfortable that the plans will work as
expected
|
Test Type
|
Activities
|
Benefits
|
|
Table-Top Test or Exercise
|
Normally conducted as one of the first plan
'tests', it involves a physical examination and review of the plan documentation.
Aims to ensure that:
· BCP/DRP is complete and relevant to the expressed
business needs (operational & strategic).
· The relevance and currency of the risk assessment,
critical applications and the BCP are tested.
· Inconsistencies in logical flow, resource allocations or
conflict between individual plans are recognised
|
Inexpensive and relatively easy to
organise.
Allows a rapid test to be undertaken on completion
of the plans.
|
|
Table-Top Scenario
Test
|
Involves a desktop walkthrough of the plan(s), with
discussion guided by the use of one or more potential scenarios.
The activities are based around a series of
questions and answers relating to the deployment of the plans in response to changing issues in the
scenario.
|
Has similar benefit to the 'desktop review', with
the additional advantage that it requires more challenging thinking from the participants.
However, it does require a more significant
commitment in time and skills to conduct.
|
|
Notification and Callout
Test
|
Activities are based around the verification of the
accuracy, currency and usefulness of contact lists (who you would need to call)
|
Tests notification and contact lists
Provides a real time validation of individuals'
ability to respond to the first (and crucial) stage of plan activation.
|
|
Live Scenario Test
|
Can be conducted as a limited activation
(narrow/specific scenario and/or targeted areas) up to a full-scale activation of all continuity
arrangements.
|
Such testing provides the most robust testing (and
training) of the plan.
However, it takes significant time and resources to
plan for and conduct. It may also provide a major distraction from normal business operations.
|
|
dark.jpg)
