Back

Include testing cycles and test scope in the business continuity testing policy.


CONTROL ID
13236
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a business continuity testing policy., CC ID: 13235

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Determine whether the testing policy establishes a testing cycle with increasing levels of test scope and complexity. (TIER I OBJECTIVES AND PROCEDURES Risk Monitoring and Testing Objective 11: Testing Policy 3, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, February 2015)
  • Scope and frequency of testing. (App A Objective 8:1j, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • A policy that includes strategies and expectations for exercise and test planning. (App A Objective 10:7a, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Minimum frequency, scope, and reporting. (App A Objective 10:8b, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)