This perspective provides an overview of the Business Continuity Institute’s Professional Practice 6 (PP6) – Validation, which is the professional practice that “confirms that the Business Continuity Management (BCM) program meets the objectives set in the Business Continuity Policy and that the organization’s BCM program is fit for purpose”. Business continuity practitioners should perform validation activities after documenting response and recovery plans for their organizations (for more on planning, read our perspective on PP5 – Implementation).
PP6 addresses three activities specific to the validation of BCM program assumptions. First, PP6 provides guidance regarding the development and execution of an exercise program, which validates the business continuity requirements gathered during the business impact analysis (BIA) and the strategies documented in the organization’s business continuity plans. Second and third, PP6 covers the principles and techniques necessary for performing both program maintenance activities and program reviews to identify improvement opportunities and increase organizational resilience. Let’s take a closer look at each activity.