Incident Response Testing
Incident response is another aspect that should be checked. It is preferable to consult with important internal stakeholders about how you would respond to both a typical and one of the worst cyber incidents instead of finding it out during an attack. Assess your incident response processes, including disaster recovery and business continuity plans.