Testing requires some centralized coordination, usually by the recovery planning coordinator, because of his/her contingency planning knowledge and understanding of how the business continuity team plan interacts with the overall recovery strategy of the organization. The coordinator is also responsible for overseeing the accomplishment of targeted objectives and follow-up with the appropriate areas on results of the exercise.

Design the testing program to start with the basics and build up with each test becoming more complex and comprehensive than the previous. For example, test the ability to bring up the operating system from the backups stored off-site. Next, bring up the operating system and an application on an alternate processor. Then, test user access and ability to perform transactions. Later, include users from different locations and with different resources dependencies.

Participants should fully use their resourcefulness to overcome the problems within the
restraints of the test scenario.

More personnel participating in the exercises allows greater exposure and more resources familiar with the business recovery plan, which increases awareness, buy-in, and ownership. Try to rotate personnel involvement in annual testing to be prepared for retirements, promotions, terminations, and/or transferring of tasks. All team members need multiple exposures to the procedures they are to follow under a variety of conditions. Some tests can be unannounced—but none should be infrequent. Long
periods of inactivity can result in a deterioration of skills and understanding of roles and responsibilities. If well managed and supported, testing can serve to validate an organization’s crisis management/ response program and ensure continued involvement and improvement.

Tests need to have a strategic combination of the following elements: