Testing Methodologies
Checklist
Call Tree Testing
Evacuation Testing
Table Top Testing
Walk Through Testing
Simulation Testing
Parallel Testing
Full interruption Testing
CHECKLIST
COPIES of the plan are sent to different department
managers and business unit managers for review, (WITHOUT A MEETING).
Simple test and should be used in conjunction with other tests.
Call Tree Testing
A telephone procedure - Used to notify staff of an emergency - Personal contact information like
Telephone, cell phone or pager
Automated BCP Call Tree
Effectiveness of call tree:
Test it regularly
Update when ever necessary
Missing or changed phone numbers
can severely degrade the
performance of a call tree
Evacuation Testing
Local emergency action and evacuation plans
Building evacuation routes
Notification protocols
Emergency exercises
Documenting and reporting injuries
Table Top Testing
Review the various elements of BCP without creating a disruption to your business
Management is involved to check if the org has ability to continue functioning after disaster
Steps:
Select Facilitator –Leads the exercise
Develop Objective of exercise
Create Scenarios
Determine who will be involved and their schedule
Perform exercise
Walk-through testing
Disaster recovery team role-play a disaster scenario prepared by a test moderator.
The disaster recovery plan is referred to for information during the test
Team members and other individuals responsible for recovery and walk through the plan step-
by-step to identify errors or assumptions
Simulation testing
This is a simulation of an actual emergency
Response team act in the same way as Real emergency
The responses of the team
Measured
Suggestions by authority may be put into action
The scope of a simulation test must be carefully defined –
to avoid excessive disruption of normal business activities.
Parallel testing
Similar to simulation testing, but
The primary site is uninterrupted
Critical systems are run in parallel at the alternative and primary sites.
Staff are relocated
Backup tapes transferred
Operational readiness established in accordance with the disaster recovery plan while
operations at the primary site continue normally
Full interruption testing
This test involves all facets of the company in a response to an emergency
It mimics a real disaster where all steps are performed to test the plan
Steps:
Systems are shut down at the primary site
All individuals who would be involved in a real emergency
Internal and external organizations are involved
This test is the most detailed, time-consuming, and expensive all of these