Aside from experiencing an actual crisis event and learning how to better the program, an organization can greatly benefit from practicing their response under normal conditions. When evaluating a crisis management program, organizations should consider designing corporate governance rules to ensure full internal compliance.
In addition to policy and procedures, some examples of practicing response
to crisis are:

• Validating contact information using a call tree test
• Using a notification system to transmit messages via voice mail and email to crisis management team members
• Assembling team members in a conference room and reviewing plans using a tabletop crisis scenario
• Setting up a physical mock exercise where rooms or buildings are cordoned off and teams refer to written plans to respond as events unveil. To measure the effectiveness of these practice exercises, you can use a metrics tool with a numeric rating scale comparing against industry best practices. Management can see results on graphed charts and compare their preparedness levels over time. Something auditors love!