The entity tests recovery plan procedures supporting system recovery to meet its objectives
Business continuity plan testing is performed on a periodic basis. The testing includes (1) development of testing scenarios based on threat likelihood and magnitude; (2) consideration of system components from across the entity that can impair the availability; (3) scenarios that consider the potential for the lack of availability of key personnel; and (4) revision of continuity plans and systems based on test results.
The integrity and completeness of back-up information is tested on a periodic basis.