Testing & continuous improvement

• An annual digital resilience testing programme is established.
• Business continuity and disaster recovery tests are carried out.
• You have assessed whether your entity must carry out TLPT tests (every 3 years).
• A process for sharing information on cyber threats is in place.
• The risk management framework is updated after every test or incident.
• All staff are made aware and trained every year.

← Previous phase: ICT supply chain