Exercising and Testing
Exercising
An Exercise is a simulation of a disruptive event with the purpose of:
- Validating the incident management process (other terms such as emergency management, crisis management and major incident management are variously used).
- Training Incident Management Team members to improve confidence and competence.
- Testing the procedures in the Incident Management Plan.
- The exercise can also have a pandemic bias for use in validating Pandemic Plans.
Incident management plans and procedures cannot be considered to be workable until they have been exercised. Failure to exercise plans may result in a false level of confidence in the reliability of the plans or in the capability of the Incident Management Team. Exercises are not intended to catch people out but build understanding and expertise. We have designed and delivered in excess of 150 exercises over the years.
Types of Exercise
We offer three levels of exercise, consistent with recognised standards and best practice. These are:
Desktop Walkthrough
A discussion based workshop for up to 15 participants. The Desktop Walkthrough lasts 2 – 4 hours and enables clients to formulate or finalise new incident management plans. The Desktop Walkthrough is an excellent way of raising awareness of plan content.
Scenario Exercise
An interactive workshop for up to 15 participants. The Scenario Exercise lasts 4 hours, using a realistic scenario and time-line to validate existing incident management plans. The Scenario Exercise is a very efficient method for identifying weaknesses in plans and increasing the incident management confidence and skill levels of participants. The Scenario Exercise is our most popular exercise option.
Simulation
A real-time rehearsal for up to 25 participants. The Simulation lasts 5 – 7 hours using a realistic scenario and time-line to enable participants to understand the use of the incident management plan during a real incident. The Simulation can be used to test communications and recovery resources. It introduces elements such as dealing with stakeholders, the media and other third parties.
Testing
A test takes the concepts outlined in the Exercise section to an operational level. A test is used to verify the ongoing effectiveness of the BCM arrangements. This provides greater assurance that following an incident, critical activities will be recovered as required.
Tests can be used to verify the effectiveness of business continuity plans and IT service continuity plans.
Types of Testing
We offer two test products. These are:
Continuity of Business Test
A facilitated test of business continuity plans at the recovery location. The Continuity of Business Test will verify your business continuity plan and the assumptions within it. It is an effective way of building understanding between operational and technical teams (e.g. IT) of the requirements for business recovery. Business continuity managers also get a clear understanding of the effectiveness of current plans.
Managed Recovery Test
Formulated from a progressive test calendar, the Managed Recovery Test encourages increasing complexity and challenge of technical (e.g. IT) recovery tests. One of our highly experienced consultants will help develop scope, objectives and success criteria for tests. We can also assist with user test scripts and independently verify test outcomes. This gives business continuity and IT service continuity managers an important level of assurance regarding IT service continuity arrangements.
Products that complement Exercising and Testing include:
