Page 244 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 244
description also makes them fair game for the performance review
process.
Testing and Exercises
The BCP documentation should also outline a formalized exercise
program to ensure that the plan remains current and that all
personnel are adequately trained to perform their duties in the event
of a disaster. The testing process is quite similar to that used for the
disaster recovery plan, so we’ll reserve the discussion of the specific
test types for Chapter 18.
