12.10.2 Review and test the plan, including all elements listed in Requirement 12.10.1, at least annually.
12.10.2 Interview personnel and review documentation from testing to verify that the plan is tested at least annually, and that testing includes all elements listed in Requirement 12.10.1.
Without proper testing, key steps may be missed, which could result in increased exposure during an incident.