How to test a continuity plan drill.

Running a Drill and Finding the Gaps

I spent forty minutes yesterday watching a mid-sized logistics manager try to explain how to test a continuity plan using a $50,000 software simulation. It was a joke. He was clicking buttons on a shiny dashboard to prove “resilience,” but he couldn’t tell me who actually picks up the phone when the primary server goes dark. Most companies treat continuity testing like a checkbox exercise for the auditors, buying expensive digital theater to avoid the uncomfortable conversations about how their actual operations function.

I’m not here to sell you a subscription or a complex framework that looks good in a slide deck. I’m going to show you how to strip away the fluff and actually find the cracks in your operation. We are going to talk about the messy, unglamorous reality of testing the process, not the software. If you want to know how to test a continuity plan without wasting a fortune on tools that mask your incompetence, keep reading. I’ll give you the no-nonsense steps I’ve used for fifteen years to ensure a process actually works when the lights go out.

Table of Contents

Why Your Business Continuity Readiness Assessment Fails

Why Your Business Continuity Readiness Assessment Fails

Most companies treat a business continuity readiness assessment like a box-ticking exercise for the auditors. They hire a consultant, run through a few scripted tabletop exercise scenarios, and call it a day. It’s theater. You aren’t actually testing resilience; you’re testing how well your managers can recite a PDF they haven’t looked at in six months. If your assessment doesn’t involve people actually struggling with the friction of a broken process, you aren’t assessing readiness—you’re just polishing a lie.

The failure usually happens because the assessment is decoupled from reality. You might run various disaster recovery simulation exercises, but if those exercises don’t account for the actual chaos of your specific logistics chain or the manual workarounds your staff uses every day, the results are useless. I see it constantly: firms spend fifty grand on software to automate “recovery,” yet they haven’t even mapped the manual hand-offs that happen when the power goes out. You can’t validate a plan with a checklist if the underlying process is a black box. Stop looking for a magic tool to tell you if you’re ready and start looking at the gaps in your documented workflows.

Defining the Process Before the First Drill

Defining the Process Before the First Drill.

Most managers treat a drill like a fire drill in school: they wait for the bell, run outside, and assume everything is fine because no one died. That’s not testing; that’s theater. Before you even think about scheduling disaster recovery simulation exercises, you need to map out exactly what you are trying to prove. If you haven’t documented the specific sequence of handoffs between your logistics desk and your warehouse manager, your simulation is just a group of people sitting in a room guessing. You cannot validate a ghost.

I see companies waste thousands on software licenses to manage their readiness, yet they can’t tell me who has the authority to declare a disaster. You need to define your tabletop exercise scenarios based on actual, documented workflows—not “what if” fantasies. Pick a specific failure point, like a regional carrier outage, and trace the movement of data and physical goods through your existing, written steps. If the process isn’t on paper, the exercise is a waste of billable hours. Stop trying to test your resilience and start testing your documentation.

Five Ways to Stop Wasting Time on Fake Drills

  • Stop simulating the easy stuff. If your test only covers what happens when the internet goes down for an hour, you aren’t testing continuity; you’re playing pretend. Test the scenarios that actually make your operations manager sweat.
  • Test the people, not the software. I’ve seen companies spend six figures on redundant cloud servers only to realize during a drill that nobody actually knows the login credentials for the emergency admin account.
  • Kill the “all-hands” meeting approach. A continuity test shouldn’t be a social hour. If you’re pulling twenty people off the floor for a two-hour “simulation,” you’ve just created the very operational waste you’re supposed to be protecting against.
  • Measure the gap, not the success. A “successful” drill where everything goes perfectly is a useless drill. I want to see exactly where the process breaks, where the communication lags, and where the manual workarounds fail.
  • Document the failure immediately. The drill isn’t over when the timer stops; it’s over when you’ve updated the written process to account for what just broke. If you don’t change the documentation, you’ve just wasted the cost of the meeting.

Stop Playing Dress-Up with Software

A continuity plan isn’t a digital dashboard; it’s a sequence of human actions. If you can’t execute the steps with a pen and paper, no amount of expensive failover software will save you when the power goes out.

Stop running drills to “check a box” for auditors. A drill that doesn’t expose a specific, documented gap in your process is just an expensive waste of everyone’s time.

If the process isn’t written down, it doesn’t exist. You aren’t testing a plan during a drill; you are testing your memory, and memory is the first thing to fail under pressure.

Stop Playing Pretend

Stop Playing Pretend with continuity testing.

If you’ve followed this far, you know that testing a continuity plan isn’t about checking a box to satisfy an auditor or buying a shiny new dashboard. It’s about the grit of the process. We’ve covered why your readiness assessments are likely failing, why you need to define the actual steps before you even think about a drill, and why a tool is useless if it’s just masking a broken workflow. You can’t simulate a crisis if you haven’t even written down the baseline of how you operate on a Tuesday morning. Stop wasting budget on software that promises resilience; instead, invest in the discipline of documentation and the rigor of actual, messy, unscripted testing.

At the end of the day, a continuity plan is just a stack of paper until someone actually follows it under pressure. My advice? Stop looking for the perfect simulation software and start looking at your most inefficient, undocumented hand-offs. That is where your real risk lives. True resilience doesn’t come from a high-tech command center; it comes from a team that knows exactly what to do because the process is etched into the workflow. Get it on paper, test the friction points, and stop pretending you’re ready until you’ve actually proven it.

About Idris Haverkamp

A tool cannot fix a process you have not written down. I start with the process.

Idris Haverkamp

A tool cannot fix a process you have not written down. I start with the process.