164.308(a)(7)(ii)(D) Testing and Revision Procedures (Addressable)
Administrative safeguard · Addressable
The requirement as we hold it
Testing and Revision Procedures (Addressable). Implement procedures for periodic testing and revision of contingency plans. NIST recommends annual tabletop, biennial functional, and post-incident lessons-learned updates.
The examiner asks
- Show me the last periodic test of the contingency plan and what changed after it.
- What does the revision procedure look like?
Evidence to bring
- the testing schedule
- the last test report and revisions
Source: 164.308(a)(7)(ii)(D) at eCFR. Our statement of the clause, not the instrument verbatim.