FFIEC IT Examination Handbook BCM-VII.E: VII.E Exercise and Test Plans (Business Continuity Management)

Exercise and test plans state objectives, expectations, scenarios, assumptions and constraints, metrics for success, roles for participants, support staff and observers, a consolidated schedule, decision makers and succession, locations, escalation procedures and contacts, in proportion to the recovery objectives; management reviews and considers third-party providers' exercise results whatever its own participation, evaluates providers' ability to recover critical services, reviews results, updates the BCP and reports to the board or its committee.