Policy 7230A - Department of Administration

8.1.3.2 Execute Tests
Completion of tests requires appropriate notification throughout the
organization to ensure the test achieves its desired results:
• Provide notice to test participants so that they can plan
workload to ensure availability for the test.
• Provide notice to business and IT operations staff in the event
that the plan inadvertently impacts normal operations.
8.1.3.3 Review Test Results and Take Corrective Action
Once the test has been completed, the results should be reviewed to
see if the IR plan accurately reflects the needs of the organization or if
an adjustment is required.
8.1.4. Operate the Plan
No applicable Non-Mandatory Procedures.
8.2. Maintain Records
Agencies should capture documentation appropriate to all incident response
processes:
• Document and retain copies of incident response roles, responsibilities,
assigned individuals and appropriate contact information.
• Document and retain copies of incident response training materials.
• Document and retain copies of the incident response plan, including
preparatory materials.
• Document and retain copies of completed incident response tests.
32