Back

Include testing critical applications in the business continuity testing strategy.


CONTROL ID
13261
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a business continuity testing policy., CC ID: 13235

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Testing critical applications, recovery of data, failover of the network, and resilience of telecommunications links; (TIER II OBJECTIVES AND PROCEDURES Testing Strategy Objective 1: Event Scenarios 2 Bullet 2, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, February 2015)
  • Demonstrate that critical services can be recovered within agreed upon recovery objectives (RTOs, RPOs, and MTDs) and customer SLAs. (App A Objective 10:11b, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Infrastructure (e.g., power, telecommunications, transportation) that is disrupted. (App A Objective 10:25d, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)