University of Kentucky maintains a robust Training and Exercise program in accordance with recommendations from Federal Emergency Management Agency and the U.S. Department of Homeland Security. Tabletops, drills, and functional exercises are scheduled regularly and provide measures to ensure the departmental plan is capable of supporting the execution of emergency support functions and /or mission essential functions throughout the duration of a continuity situation. Data from exercise evaluations and actual incidents are collected and analyzed and serve as the basis for After-Action-Reports and lessons learned.
The Division of Crisis Management and Preparedness is available to assist with training and exercises on key issues affecting the University or multiple departments on a limited and essential basis as schedules permit. For questions regarding Training, Evaluation and Vulnerability Assessments, contact The Division of Crisis Management and Preparedness team.
Functional exercises allow personnel to validate plans and readiness by performing their duties in a simulated operational environment. Activities for a functional exercise are scenario-driven, such as the failure of a critical business function or a specific hazard scenario. Functional exercises are designed to exercise specific team members, procedures and resources (e.g. communications, warning, notifications and equipment set-up).
A full-scale exercise is as close to the real thing as possible. It is a lengthy exercise which takes place on location using, as much as possible, the equipment and personnel that would be called upon in a real event. Full-scale exercises are conducted by public agencies. They often include participation from local businesses.
Tests should be conducted to validate that business continuity recovery strategies will work. Tests should also be conducted to verify that systems and equipment perform as designed. Tests can take several forms, including the following:
Component - Individual hardware or software components or groups of related components that are part of protective systems or critical to the operation of the organization are tested.
System - A complete system test is conducted to evaluate the system’s compliance with specified requirements. A system test should also include an examination of all processes or procedures related to the system being tested.
Comprehensive - All systems and components that support the plan are tested. An example of a comprehensive test is confirming that IT operations can be restored at a backup site in the event of an extended power failure at the primary site.