NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems NISTSP34-5: Plan Testing, Training, and Exercises (TTE)

Conduct Plan Testing, Training, and Exercises (TTE) per NIST SP 800-34 Rev 1 Section 3.6 + Appendix C (TTE Best Practices) + NIST SP 800-84 Guide to Test, Training, and Exercise Programs. Testing per Section 3.6.1 must (a) verify the plan documented procedures work as designed including notification + activation + system recovery + reconstitution + escalation + decision authority, (b) include functional tests (technical recovery of system components in a test environment) + tabletop exercises (discussion-based walkthroughs) + drills + full-scale exercises depending on impact level + organisational maturity + regulatory requirements per Appendix F. Training per Section 3.6.2 must (a) provide initial training for personnel with ISCP responsibilities covering plan content + procedures + contact information + decision authority + tools, (b) refresh training annually + after significant plan changes + on personnel turnover. Exercises per Section 3.6.3 must (a) be planned + scoped + documented + observed + after-actioned with lessons learned fed back to plan updates, (b) be conducted at frequency aligned with FIPS 199 impact level (Low annually + Moderate annually with technical recovery test + High annually with full functional test). Test documentation and after-action reports per Appendix C must capture objectives + scope + scenario + participants + observations + findings + recommendations + closure tracking.