Business Continuity Testing

Your BC plans are approved.

But have they been tested?

Boards want practical assurance, not further policy approval. Our two-session model produces evidence of improvement, not just recommendations.

Trusted by
Colliers International Acas Greene King Birketts LLP Lyca Mobile

A plan that has never been tested as a coordinated response is not a business continuity plan. It is a document.

Most BC plans are written, approved, and filed. The people named in them have not rehearsed their roles. The dependencies between teams have not been tested under time pressure. The gaps only become visible when an incident occurs.

Boards and auditors are increasingly asking for evidence of testing, not evidence that a plan exists. A desktop exercise conducted by an independent facilitator produces that evidence and identifies the gaps before they matter.

What a tested plan provides

  • Evidence that response procedures have been rehearsed
  • Identified gaps before an incident reveals them
  • A documented improvement record for auditors and insurers
  • Practical assurance for the board

Designed to produce evidence of improvement, not just a list of recommendations.

1

Scenario Design

We design a realistic scenario based on your sector, your size, and the dependencies in your plan. Participants receive a briefing in advance. No surprises, no theatre.

2

Facilitated Desktop Exercise

A structured exercise with your response team. We facilitate, observe, and record. Every decision and gap is documented in real time.

3

Findings and Improvement Plan

A written report with specific, prioritised improvements. Not a generic checklist. Mapped to the gaps observed during the exercise.

4

Validation Exercise

A second exercise to confirm improvements have been implemented. This session produces the evidence record that demonstrates progress to auditors and the board.

Zero findings across four years of recertification.

4+
Years of ISO 22301 recertification
0
Audit findings across all recertifications
4
Frameworks maintained simultaneously
"One of the best BCMS examples she had ever audited."
Zoe Harris, Director Head of Compliance Operations and Facilities, Colliers UK — ISO 22301 Recertification, October 2025. Zero findings.

Download the SSF BC Testing Approach

How we design, facilitate, and document BC testing exercises. One page. No sales content.

We will not add you to a mailing list. One document, no follow-up unless you ask.

Book a conversation

15 minutes to understand your current position and whether a desktop exercise is the right next step.

Book a Conversation
Via Calendly. We will confirm within one business day.
Download Approach Book a Call

Ask us a question

Message sent.

We will reply to you within one working day.