Back

Include test requirements for business lines, as necessary, in the business continuity testing policy.


CONTROL ID
13238
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a business continuity testing policy., CC ID: 13235

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Determine whether the institution has a business continuity testing policy that sets testing expectations for the enterprise-wide continuity functions, business lines, support functions, and crisis management. (TIER I OBJECTIVES AND PROCEDURES Risk Monitoring and Testing Objective 11: Testing Policy 1, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, February 2015)
  • Verification of continuity and resilience process assumptions and the ability to process a sufficient volume of work during adverse operating conditions. (App A Objective 10:7f, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Activities commensurate with the importance of the business process. (App A Objective 10:7g, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • RDC systems and processes. (App A Tier 2 Objectives and Procedures N.13 Bullet 1 Sub-Bullet 3, Sub-Sub Bullet 1, FFIEC IT Examination Handbook - Retail Payment Systems, April 2016)