Appearance
The incident management policy, including the associated incident response plan, is exercised at least annually.