[BCM] [BT] [E2] [C7] Testing and Exercising

Chapter 7

Testing and Exercising Phase as Part of the Business Continuity Management Planning Methodology for Bandtree

For Bandtree, a government-linked company operating under Darussalam Assets Sdn Bhd, resilience is not merely about planning—it is about proving that those plans work when disruptions occur. As Bandtree manages critical corporate property and infrastructure across Brunei Darussalam, its ability to safeguard operations directly influences tenant confidence, national infrastructure stability, and stakeholder trust.

The Testing and Exercising Phase of the Business Continuity Management (BCM) planning methodology, as outlined in ISO 22301, ensures that Bandtree’s continuity strategies are not only designed but also validated through practical application. By structuring exercises into initial (basic) tests and advanced tests, Bandtree can gradually build confidence, identify weaknesses, and achieve operational resilience in line with international standards.

Initial Tests

Initial tests are designed to validate the basic functionality of Bandtree’s continuity measures. These tests are less complex but essential in building foundational assurance.

1. Component Tests

These involve testing individual parts of Bandtree’s continuity system. For example, Bandtree’s IT team may test backup systems for tenant lease management software to ensure data integrity. Similarly, testing generator backups at the HQ Building in Jalan Pantai Jerudong ensures that critical facilities remain powered during outages.

2. Call Notification Tests

Communication is the lifeline of crisis response. Bandtree can conduct tests to ensure that staff members, including property managers stationed at various government facilities, receive timely notifications during a disruption. For example, a scheduled notification test could verify if emergency contacts such as security providers or utility vendors are reachable within agreed-upon timelines.

3. Walkthrough Exercises

In these structured discussions, Bandtree staff walk through predefined scenarios, such as a sudden power outage at a key office building or flooding affecting tenant access. The walkthrough helps employees understand their roles and responsibilities while revealing gaps in the continuity plan.

Advanced Tests

Once Bandtree demonstrates proficiency in the initial tests, more complex exercises are necessary to simulate real-life crisis dynamics.

1. Integrated Tests

These involve multiple departments working together to validate how different continuity plans interconnect. For instance, the facilities management team, IT support, and finance department could jointly test a scenario where a system outage coincides with a facility shutdown. This ensures that dependencies, such as invoicing tenants during system downtime, are managed effectively.

2. Simulation Tests

Bandtree can simulate real-world incidents in a controlled environment.

For example, a cyberattack simulation on Bandtree’s property management system can test IT recovery while simultaneously evaluating how management communicates with tenants and reports status updates to Darussalam Assets.

This type of exercise tests decision-making under pressure without disrupting live services.

3. Live Tests

The most challenging involve enacting real responses under realistic conditions. Bandtree could conduct a live evacuation of the HQ Building as part of a mock fire drill, testing coordination with emergency services and evaluating staff response times.

Another example could include temporarily switching operations to a backup site to test the company’s relocation capability.

Summing Up ...

For Bandtree, the Testing and Exercising Phase is not a one-time activity but a continuous cycle of improvement. By starting with initial tests such as component checks and walkthroughs, and gradually progressing to advanced tests like simulations and live drills, Bandtree ensures that its Business Continuity Management program evolves in maturity and reliability.

Through these structured exercises, Bandtree strengthens its preparedness, validates its crisis response capabilities, and instills confidence among stakeholders—including tenants, regulators, and Darussalam Assets—that it can manage disruptions effectively.

Ultimately, testing and exercising transform Bandtree’s continuity strategies from theoretical documents into practical, proven resilience measures aligned with ISO 22301.

Resilience Redefined: Implementing BCM at Bandtree Sdn Bhd Brunei
eBook 2: Implementing Business Continuity Management
C1	C2	C3	C4	C5
C6	C7	C8	C9	C10

 

More Information About Business Continuity Management Courses

To learn more about the course and schedule, click the buttons below for the  BCM-300 Business Continuity Management Implementer [BCM-3] and the BCM-5000 Business Continuity Management Expert Implementer [BCM-5].

	Please feel free to send us a note if you have any questions.