← University
Testing and Exercising Your Continuity Plan
0 of 4

A business continuity plan dated 18 months earlier sits in a 3-ring binder on a shelf in the operations manager's office at a regional food processing facility in southern Alberta. The document runs to 47 pages and includes emergency contact trees, supplier backup arrangements, IT recovery procedures, and protocols for relocating production to a secondary site if the main facility becomes unusable. The plan was developed over 6 months by a cross-functional team that included the operations manager, the plant supervisor, the IT coordinator, and a consultant retained for the project. When completed, the chief executive signed off on it and the board of directors received a summary at their quarterly meeting. Since then, the plan has remained untouched.

The facility processes and packages agricultural products for distribution to grocery chains across western Canada. It employs 83 full-time staff and operates 2 production shifts, 5 days per week. The organization's primary risks include equipment failure, supply chain disruption, food safety incidents requiring product recall, and loss of access to the facility due to fire, flood, or severe weather. The continuity plan addresses each of these scenarios in varying levels of detail, with the most comprehensive section devoted to IT system recovery and the least developed section covering manual workarounds for production equipment failure.

In the months since the plan was finalized, several changes have occurred that the document does not reflect. The IT coordinator who helped develop the plan left the organization 8 months ago and was replaced by a new hire who has never seen the continuity documentation. 3 of the 12 suppliers listed in the backup arrangements have changed their terms or ceased operations. The secondary production site identified in the plan, a partner facility 140 kilometres away, underwent a change in ownership and the informal agreement that underpinned the relocation protocol was never formalized in writing. The emergency contact tree includes direct phone numbers for 4 employees who have since departed.

The operations manager has begun raising concerns with senior leadership about the plan's reliability. A near-miss incident 2 weeks ago, when a power surge caused a 4-hour production stoppage, revealed that staff were uncertain about escalation procedures and that the documented backup generator startup sequence did not match the actual equipment configuration. No formal exercise or test of the continuity plan has ever been conducted. The chief executive has asked the operations manager to propose a testing approach that can be completed within the current fiscal quarter without disrupting production schedules or requiring significant additional budget allocation.

Types of Continuity Exercises: Tabletop, Functional, and Full-Scale

Continuity exercises represent one of the most valuable investments an organization can make in its resilience, yet they remain among the most underutilized tools in Canadian risk management practice. The reason for this underutilization often comes down to a fundamental misunderstanding about what exercises are meant to accomplish. Many business owners and non-profit operators view testing their continuity plans as a pass-fail examination, something to be dreaded and minimized, rather than recognizing exercises as learning opportunities that reveal gaps before genuine emergencies expose them at the worst possible moment. Understanding the different types of continuity exercises available, from simple discussion-based formats to complex operational simulations, allows organizations of every size to build testing programs that match their resources, risk profiles, and operational realities.

The foundation for continuity exercise practice in Canada draws from several sources that Canadian organizations should understand. CSA Z1600, the Canadian Standard for Emergency and Continuity Management Program, establishes expectations for exercise programs as part of a comprehensive management system. As of the date of authorship, this standard emphasizes that organizations must test, evaluate, and continuously improve their continuity capabilities through regular exercises. The standard does not mandate specific exercise types or frequencies but instead requires that the testing program be appropriate to the organization's size, complexity, and risk environment. This flexibility proves essential for Canadian businesses because a four-person accounting firm in Halifax faces fundamentally different testing requirements than a regional hospital in Winnipeg or a mining operation in northern Alberta. The principle underlying all exercise standards remains consistent: plans that exist only on paper provide false confidence until they have been validated through practical application.

That’s the free preview

You’ve reached the end of what’s open to read. The rest of this lesson is part of a $79 course — purchasing unlocks it, or sign in if you already have access.