[BCM] [MOM] [E2] [C7] Testing and Exercising

Testing and Exercising Phase as Part of the BCM Planning Methodology for the Ministry of Manpower

Introduction

The Testing and Exercising Phase is a critical component of the Business Continuity Management (BCM) Planning Methodology for the Ministry of Manpower (MOM).

While business continuity plans may be comprehensive on paper, their effectiveness can only be assured through systematic testing and realistic exercises.

For MOM—a key public sector agency responsible for workforce regulation, employment services, and labour market stability—testing ensures that essential services can continue during disruptions such as pandemics, cyber incidents, system outages, or national emergencies.

This phase validates the practicality of MOM’s recovery strategies, assesses staff readiness, identifies procedural gaps, and reinforces coordination across departments and with external stakeholders.

Testing and exercise activities should be progressive, starting with basic tests and progressing to more complex, realistic scenarios.

Objectives of Testing and Exercising at MOM

The primary objectives of the Testing and Exercising Phase include:

• Verifying the effectiveness of MOM’s Business Continuity Plans
• Ensuring staff understand their roles and responsibilities during disruptions
• Assessing communication and escalation procedures
• Validating recovery time objectives (RTOs) for critical business functions
• Strengthening inter-departmental and inter-agency coordination
• Supporting continual improvement of BCM capabilities

To achieve these objectives, tests and exercises at MOM are grouped into Initial (Basic) Tests and Advanced Tests.

Initial Tests

Initial tests are designed to familiarise staff with BCM arrangements and validate individual components of the BCP. These tests are low-risk, cost-effective, and suitable for early stages of BCM maturity.

Component tests verify the functionality and availability of individual elements within MOM’s BCM framework. These elements may include:

• Backup IT systems supporting work pass applications, employment services, or inspection systems
• Access to alternate work locations or work-from-home arrangements
• Availability of critical documents, templates, and contact lists
• Redundancy of communication tools such as email, messaging platforms, and hotlines

For MOM, component tests help ensure that essential systems supporting employers, migrant workers, and the general public remain operational during disruptions.

Call notification tests are conducted to verify the effectiveness of MOM’s emergency communication and staff notification procedures.  These tests typically involve:

• Activating emergency contact lists
• Testing SMS, email, or automated notification systems
• Confirming response times and acknowledgement rates
• Ensuring accurate escalation to crisis management and business unit leaders

Such tests are vital for MOM, given its large workforce and the need for rapid mobilisation during incidents that may affect national employment or labour stability.

Walkthrough Exercises

Walkthrough exercises, also known as tabletop reviews, involve guided discussions where participants review BCM procedures step by step. These exercises:

• Validate the clarity and completeness of BCP documentation
• Confirm staff understanding of roles, decision-making authority, and dependencies
• Identify inconsistencies or outdated assumptions
• Encourage cross-functional alignment among MOM departments

Walkthrough exercises are beneficial for onboarding new staff, refreshing knowledge, and validating plans following organisational or policy changes.

Advanced Tests

Once MOM has established confidence in basic BCM capabilities, more advanced tests can be conducted. These tests simulate realistic disruption scenarios and require higher levels of coordination, resources, and executive involvement.

Integrated tests assess the combined performance of multiple business functions, systems, and teams operating together under a single scenario. At MOM, this may involve:

• Coordinated recovery of IT systems and business operations
• Activation of crisis management, communications, and operational teams
• Testing interdependencies between departments such as policy, operations, enforcement, and communications
• Coordination with other government agencies or service providers

Integrated tests provide a holistic view of MOM’s organisational resilience and readiness.

Simulation tests introduce time-pressured and dynamic scenarios that closely mirror real-world incidents. These tests typically include:

• Scenario-based injects, such as media queries, policy decisions, or system failures
• Simulated disruptions affecting multiple services simultaneously
• Real-time decision-making by senior management
• Evaluation of situational awareness and command-and-control structures

For MOM, simulation tests are particularly valuable for preparing for complex national-level incidents, such as large-scale workforce disruptions, pandemics, or cyberattacks.

Live tests represent the most comprehensive and demanding form of BCM testing. They involve actual execution of recovery strategies, such as:

• Operating from alternate work locations
• Switching to backup IT systems in real time
• Implementing work-from-home or split-team arrangements
• Running critical services under simulated disruption conditions

While live tests require careful planning to avoid service disruption, they provide the highest level of assurance that MOM’s BCM arrangements are effective and sustainable.