5.1.2.3

Incident Response Plan – Testing

The organization shall test the incident response plan to ensure that the plan meets the intended outcomes. Where appropriate, this shall include any third-party cyber security service providers.