← HIPAA · Administrative safeguards
164.308(a)(7)(ii)(D) — Testing and revision procedures (A)
medium
dr-testing
Requirement
Implement procedures for periodic testing and revision of contingency plans.
What the engine looks for
Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.
Required element 1 — any one of
testexercisedrill
Required element 2 — any one of
contingencyrecoverybackupplanbacked up
Supporting terms — specificity signals
annualtabletopdocumented resultsrevisedlessons learned
Contradiction markers
Finding any of these outranks coverage — a policy that admits the gap is worse than silence.
plans are not tested
Equivalent controls elsewhere
Matched on shared topics. Satisfying this control usually moves these too.