The IR should be tested at-least Semiannually
Incident Response (IR) plans are designed to test company's ability to respond to a security incident.The ultimate goal is to handle the situation so that it limits the damage to the business while reducing recovery time and costs.
Running such tests keeps the IR updated and fit for purpose in the modern age, while also critically helping to identify and fix weak points.
