Under active development Content is continuously updated and improved

BC-04Continuity Testing

>Control Description

Organization performs business contingency and disaster recovery tests on a periodic basis and ensures the following: • tests are executed with relevant contingency teams • test results are documented • corrective actions are taken for exceptions noted • plans are updated based on results

Theme

Process

Type

Detective

Policy/Standard

Business Continuity Policy

>Implementation Guidance

1. Ensure that Business Continuity testing should be performed on a periodic basis as per the organization policy. 2. The business continuity testing should emulate the Business Continuity Plan and should check the coverage and efficiency of the plan. All the relevant team preparedness should be assessed in this testing. 3. Ensure that the test results are documented, and any exceptions are noted and appropriate corrective action is undertaken.

>Testing Procedure

1. Inspect whether Business Continuity Testing was performed on a periodic basis as per the organization's policy. 2. Inspect the most recent BCP test and inspect DR tests results to determine whether tests were executed and results were documented. 3. Validate whether the results of the testing exercises were tracked to remediation.

>Audit Artifacts

E-BC-03

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

Ask AI

Configure your API key to use AI features.