FFIEC IT Examination Handbook BCM-VII.A: VII.A Exercise and Test Program (Business Continuity Management)

What does BCM-VII.A require?

Management develops a comprehensive exercise and test program with objectives and plans that validate the ability to restore critical business functions, driven by the risk profile, with designated personnel controlling each exercise, business line management owning the testing of its processes and interdependencies in coordination with IT and facilities, results reported to the board and senior management, exercises at appropriate intervals, when new risks appear and after significant change, and a policy, roles, sufficient personnel and safeguards for production data.