CHAPTER 10 – TESTING AND REHEARSAL
TRUE/FALSE
1. Procedures should be audited twice a year.
2. Organizations should conduct a live walk-through of all procedures on an annual basis.
3. The results of the intrusion test are combined with recommendations for improving processes.
4. Scenario testing uses mock disasters such as severe weather or a fire to determine how well any related
procedures will work during real events.
5. The age-old fire drill is no longer a valuable exercise.
6. The evacuation of a work environment that employs continuous manufacturing should not require
equipment to be shut down.
7. Organizations that have hazardous materials must test their procedures for dealing with such materials.
8. Trade secrets and proprietary processes are some of an organization’s most valuable assets.
9. In many cases, life forms must be moved to another part of a facility or completely removed to ensure
their safety and preservation.
MODIFIED TRUE/FALSE
1. In many cases, rare materials must be cleaned or restored after a disaster.
_________________________
2. Many of the special circumstances discussed in the preceding sections require shutdown or lockdown
procedures. _________________________
3. Most organizations depend on local security agencies for fire, medical, and police services.
_________________________
4. Monitors from the organization and emergency service agencies should observe joint rehearsals.
_________________________
5. The key to getting the best test results is to have a well-planned test. _________________________
6. Natural disaster test scenarios are relatively easy to execute, and should include an entire facility.
_________________________
7. Recovery time is related to the need to save lives, reduce exposure, and minimize damage.
_________________________
8. Organizations should not overlook feedback from employees and other participants in the evaluation
process. _________________________
9. Plan revisions and procedure modifications should pass through the full review process, just as they
did during development. _________________________
MULTIPLE CHOICE
1. What type of test shows whether information is current and resources are in the right location?
a.
Procedure audits
c.
Scenario testing
b.
Live walk-throughs of procedures
d.
Department level tests
2. What type of test shows whether designated equipment is working properly?
a.
Procedure audits
c.
Enterprise-level tests
b.
Live walk-throughs of related procedures
d.
Scenario testing
3. What type of testing creates mock disasters?
a.
Live walk-throughs of procedures
c.
Scenario testing
b.
Procedure audits
d.
Live walk-throughs of related procedures
4. What type of test shows whether systems interact as designed?
a.
Procedure audits
c.
Live walk-throughs of related procedures
b.
Live walk-throughs of procedures
d.
Scenario testing
5. What type of test shows whether response time of staff is appropriate?
a.
Procedure audits
c.
Live walk-throughs of related procedures
b.
Live walk-throughs of procedures
d.
Scenario testing
6. What type of testing shows whether procedures are designed well enough to handle specific situations?
a.
Procedure audits
c.
Live walk-throughs of related procedures
b.
Live walk-throughs of procedures
d.
Scenario testing
7. Which of the following is NOT one of the levels of testing?
a.
Work group-level
c.
Facility-level
b.
Department-level
d.
Organization-level
8. What type of test shows how well procedures work for the entire organization?
a.
Department-level
c.
Enterprise-level
b.
Organization-level
d.
Facility-level
9. Which of the following is NOT an element of an evacuation test?
a.
The time and date
c.
How monitors record their evaluations
b.
What related procedures are tested
d.
The location of the evacuation test
10. What is the source of data for the executive summary?
a.
Reports from monitors
c.
Synthesized evaluation results
b.
Contents of the report
d.
Disaster response activity logs
11. What are the sources of data for the test scenario description?
a.
Contents of the report
b.
Synthesized evaluation results
c.
Documents and plans outlining the scenario
d.
Completed evaluation forms
12. What are the sources of data for exhibits and attachments?
a.
Contents of the reports
b.
Synthesized evaluation results
c.
Completed evaluation forms
d.
Documents and plans outlining the scenario
13. Synthesized evaluation results can be used for which of the following contents?
a.
Recommended changes in plans or procedures
b.
Exhibits and attachments
c.
Recommendations for further training
d.
Chronology of events
e.
Both a and c
14. In the scenario test employee survey, which of the following would NOT be a term used to describe
how the employees felt emotionally during the test?
a.
Tired
c.
Nervous
b.
Anxious
d.
Scared
15. In the scenario test employee survey, what type of response structure would “Effectiveness of the Plan
or Procedure” have?
a.
Open-ended answers
c.
Fill in the blanks
b.
List of descriptive terms
d.
Rating scale of 1 to 5
16. In the scenario test employee survey, what type of response structure would “Effectiveness of
Response Teams” have?
a.
Rating scale of 1 to 5
d.
Both a and c
b.
List of descriptive terms
e.
a, b, and c
c.
Open-ended answers
17. In the scenario test employee survey, what type of response structure would “Assessment of the Test as
a Learning Experience” have?
a.
Rating scale of 1 to 5
d.
Both a and b
b.
Open-ended answers
e.
Both a and c
c.
List of descriptive terms
18. What type of tests show how well procedures work in a mock disaster?
a.
Department-level
d.
Scenario testing
b.
Enterprise-level
e.
Both a and b
c.
Procedure audits
19. How often should procedures be audited?
a.
Once a month
c.
Once a year
b.
Once every six months
d.
Once every two years
20. How often should organizations conduct a live walk-through of all procedures?
a.
Every time a procedure has changed
b.
Every time a related procedure has changed
c.
On an annual basis
d.
All of the above
21. Why is there considerable resistance to scenario testing?
a.
Managers consider it a waste of time
b.
It has a negative impact on productivity
c.
There is no disaster recovery correlation between scenario testing and real disasters
d.
It results in lost revenue
22. In the western United States, what types of disaster procedures should be tested?
a.
Earthquakes
d.
Both a and b
b.
Mudslides
e.
a, b, and c
c.
Wildfires
23. When dealing with perishable foods, with which laws and regulations do procedures need to comply?
a.
U.S. Food and Drug Administration
d.
Both a and c
b.
Emergency Medical Organization
e.
a, b, and c
c.
Local health agencies
24. On which of the following local emergency organizations do most organizations depend?
a.
Fire
c.
Police
b.
Medical
d.
All of the above
25. The response of which of the following groups is evaluated during disaster response testing and
rehearsal?
a.
Employees
c.
Contractors
b.
Emergency medical organizations
d.
All of the above
26. Response time is related to the need to ____.
a.
save lives
c.
minimize damage
b.
reduce exposure
d.
all of the above
27. Organizations should conduct ____ sessions with employees and emergency responders after each test.
a.
feedback
c.
chat
b.
debriefing
d.
training
28. When staging a test of shutdown procedures, which of the following questions should an organization
note and consider?
a.
How quickly did supervisors and employees respond to the shutdown alarm?
b.
Were the shutdowns implemented according to procedures?
c.
If the shutdowns were not implemented according to procedures, where and when did the
human error occur?
d.
All of the above
29. When staging a test of evacuation procedures, which of the following points should an organization
note and consider?
a.
Descriptions of activities in the facility at the time of the test
b.
How the evacuation test is monitored and who the monitors are
c.
What related procedures are tested
d.
All of the above
YES/NO
1. Is testing and rehearsing disaster recovery plans the only way an organization can determine how well
the plans and related procedures work?
2. It is best to conduct a procedure audit with only the disaster recovery coordinator.
3. Live walk-throughs should be conducted for individual procedures and groups of related procedures.
4. There is little resistance to scenario testing even though it might have an impact on productivity.
5. Are many managers skeptical of the value of scenario testing?
6. Thorough evacuation procedures can create a safer corporate environment and avoid problems that
may occur in an actual fire or other disaster.
7. Disaster recovery planners must establish strong working relationships with local emergency service
providers.
8. Creating scenarios to test work groups or small facilities is the best way to start.
COMPLETION
1. To achieve good results, the disaster recovery coordinator must develop a sufficient level of
____________________ for the test, and managers and supervisors must understand the test scenario.
2. The disaster recovery team can sometimes ____________________ evaluation results, but the results
usually take the form of qualitative data.
3. The planning team and independent ____________________ need to check and approve the
procedures before placing the final versions in the recovery plan.
4. The actual disaster recovery procedures should be tested using a(n) ____________________ process.
5. Building ____________________ procedures should be reviewed by security staff and building
maintenance staff.
6. ____________________ walk-throughs should be conducted for individual procedures and groups of
related procedures.
7. Organizations should develop ____________________ to simulate the most likely threats they face.
8. Not only can ____________________ be a source of disasters, they can compound problems caused
by unrelated disasters.
MATCHING
Match the following terms to the appropriate definitions.
a.
Work group-level test
b.
Vulnerability audits
c.
Subunits of an organization
d.
Scenario testing
e.
Procedure audits
f.
Live walk-throughs of related procedures
g.
Intrusion tests
h.
Facility-level tests
i.
Enterprise-level tests
j.
Live walk-throughs of procedures
1. Procedures are actually implemented to determine their effectiveness
2. Include recommended changes for improving security
3. Often use a combination of automated and hands-on methods
4. Creates a mock disaster to determine how well procedures work
5. Related procedures are actually implemented to determine their effectiveness
6. Create a mock disaster to which a specific group of employees must respond
7. Create a mock disaster to which an entire facility must respond
8. Walk through of procedures to determine if the information in them is correct
9. Can include work groups, departments, or facilities
10. Create a mock disaster to which an entire organization must respond
SHORT ANSWER
1. An organization uses several types of tests to determine how well its disaster recovery plans and
procedures work. What are they?
2. Give five examples of realistic test scenarios.
ANS:
3. Organizations should develop test scenarios for any special circumstances and materials they have to
deal with during a disaster. List seven of these special circumstances.
ANS:
4. What should the disaster recovery coordinator do after every test or rehearsal?
ANS:
5. What happens in a live walk-through?
6. What type of sophisticated testing processes can organizations apply to technology systems?
7. What should the scope and parameters of a scenario test?
8. What must the disaster recovery coordinator do to achieve good results from a test?
9. What opportunity does testing and rehearsal provide to an organization?