Continuity is tested regularly so plans are exercised against outcomes set in advance, resilience is maintained and new solutions can emerge: objectives are set for exercising and testing the plan's technical, business, administrative, logistical, operational and procedural systems, to check that the plans fully address business risk; realistic exercises with stakeholders validate continuity procedures, including roles, responsibilities and data retention arrangements, while disrupting as little as possible; roles for running exercises and tests are assigned; exercises and tests are scheduled as set out in the plans; after each exercise a debrief and analysis considers what was achieved; and recommendations for improving the plans are drawn from that review.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.