A checklist test is a fundamental and non-disruptive method for validating a disaster recovery plan. In this test, copies of the plan and relevant checklists are distributed to the members of the disaster recovery team. Each member is responsible for reviewing their assigned sections and tasks to ensure the information is accurate, current, and complete. The primary goals are to familiarize team members with their roles and to identify any gaps or errors in the documentation without impacting live operations. This method serves as a preliminary step before more complex and resource-intensive tests are conducted.

A. Parallel test: This test involves activating the alternate recovery site and running its systems in parallel with the primary production site; it is an operational test, not a document review.

B. Simulation test: This is a role-playing exercise where team members walk through the response to a specific disaster scenario to test procedures and decision-making, which is more interactive than a simple checklist review.

C. Full-interruption test: This is the most comprehensive and disruptive test, involving the shutdown of the primary site and a complete failover of operations to the alternate site.

1. National Institute of Standards and Technology (NIST) Special Publication 800-34 Rev. 1

Contingency Planning Guide for Federal Information Systems. Appendix G

"Contingency Plan Testing

" page G-1

describes the "Checklist/Read-through Test" as: "Copies of the plan are distributed to each functional area for review. The manager from each area reads through the plan and provides feedback to the contingency planning coordinator." This directly matches the scenario in the question.

2. National Institute of Standards and Technology (NIST) Special Publication 800-84

Guide to Test

Training

and Exercise Programs for IT Plans and Capabilities. Section 4.3

"Types of Exercises

" and Table 4-1 on page 20 describe a hierarchy of exercises. The checklist test falls into the most basic category

often preceding more complex exercises like tabletop simulations (Simulation test)

functional exercises (Parallel test)

and full-scale exercises (Full-interruption test).