OM-5.9.3
Past version: Effective from 01 Oct 2007 to 30 Jun 2011
To view other versions open the versions tab on the right
All of the BCP's related risks and assumptions must be reviewed for relevancy and appropriateness as part of the annual planning of testing. The scope of testing should be comprehensive enough to cover the major components of the BCP as well as coordination and interfaces among important parties. A testing of particular components of the BCP or a fully integrated testing should be decided or depending on the situation. The following points should be included in the annual testing:
(a) Staff evacuation and communication arrangements (e.g. call-out trees) should be validated;
(b) The alternate sites for business and technology recovery should be activated;
(c) Important recovery services provided by vendors or counterparties should form part of the testing scope;
(d) Licensees must consider testing the linkage of their back up IT systems with the primary and back up systems of service providers;
(e) If back up facilities are shared with other parties (e.g. subsidiaries of the licensee), the licensee needs to verify whether all parties can be accommodated concurrently; and
(f) Recovery of vital records must be performed as part of the testing.
October 07