CIR Program Management
Advanced Testing and Exercising
The tasks performed in “Advanced Testing and Exercising” is similar to the previous discussion on testing and exercising the CIR and BCM plan.
The significant difference is the maturing of the organisation's readiness level to advanced-level exercises and tests. It focuses on the complexity and the inter-relationship between the other business units and interested parties. The validity and workability of the CIR plan are evaluated.
Errors and loopholes can be identified during this phase. The simulation of a cyber security attack can prepare employees to be accustomed to the environment. The organisation can gauge their ability to mitigate or respond to cyber security incidents based on its documented plan.
Amendments are made at this stage to the documented plan so the organisation’s ability to mitigate or respond to cybersecurity incidents can improve.
Related Topic for CIR Program Management
Back To: Rationale for Lack of Cyber Security Prioritisation | Plan Maintenance | Training and Awareness |
Advanced Testing and Exercising | Audit | Cyber Security Mindset and Culture |
Do You Want to Continue BCM Training onsite or online?
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Reference: Chapter 10 Program Management 10.5 Advanced Testing and Exercising
Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket [X-X] cross-refers to the actual chapter and section in the 1st Edition.