Summary

Prepare for the verification and validation of the service continuity plan.

Description

Verification and validation should be conducted on a periodic and event-driven basis. Typically, the verification and validation of the service continuity plan is performed periodically (e.g., annually). However, when major changes are made to the service system or to the delivery environment, the service continuity plan should be reviewed or tested to confirm the service continuity plan is still correct and current.

Example Work Products



  1. Verification and validation plan for assuring service continuity
  2. Evaluation methods used for verification and validation
  3. Description of environments necessary to conduct verification and validation
  4. Verification and validation procedures
  5. Criteria for what constitutes successful verification and validation


Subpractices



1. Develop a plan for conducting service continuity verification and validation.

The strategy for conducting service continuity verification and validation documents the requirements for verification and validation and addresses the key principles, activities, resources, and environments required for effective verification and validation of the service continuity plan.

Verification and validation is not a one-time event. The strategy should address the frequency with which verification and validation should be performed.

 

The plan for conducting verification and validation of the service continuity plan typically includes the following:
  • Strategy used for conducting verification and validation
  • Categories of threats and vulnerabilities to be evaluated
  • Essential functions and resources to be verified and validated for each category
  • Methods to evaluate the adequacy of preparation
  • Environments needed to support verification and validation
  • Schedule of activities to conduct verification and validation
  • Assigned resources



2. Review with relevant stakeholders the verification and validation plan, including evaluation methods and the environments and other resources that will be needed.

Relevant stakeholders should understand and agree to the verification and validation strategy, methods, activities, environments, and resources.



3. Determine the procedures and criteria for verification and validation of the service continuity plan.

Procedures and criteria are used to ensure the elements of the service continuity plan are correct, effective, and current relative to the categories of threats and vulnerabilities.



4. Identify changes to the service continuity plan from the preparation for verification and validation.