CyberSecurityTips #8: How often should Disaster Recovery (DR) and Business Continuity plans (BCP) be tested?

How often should Disaster Recovery (DR) and Business Continuity plans (BCP) be tested?

The short answer: as often as possible. However it is understandable that often testing taxes and stretches organizational resources, this would also depend on the type of BCP and DRP in place and how extensive it is.

At least twice a year there should be a testing of any item on the plans, every year or so there should be a testing of the entire plan - these are good practices but for some organizations hard to follow and so you would see testing such as itemised testing once a year and comprehensive testing every 2 years.