Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

Testing and Evaluation

A plan can be well thought out and account for seemingly everything, but the reality is that unless it is periodically tested and retested, you can never tell just how effective or relevant it may be in a real-world incident. Testing is the process through which the effectiveness of the plan measured and evaluated. When a plan is tested, care should be taken to ensure that the processes involved work as designed and intended.

Even if a plan is properly evaluated and tested, it must be reviewed regularly because times change and the plan must adapt. Events that can affect or diminish the overall strength of a plan include the following:

• Situational and environmental changes that are introduced as an organization evolves ...