A CSD shall monitor its business continuity policy and disaster recovery plan and test them at least annually. The CSD shall also test its business continuity policy and disaster recovery plan after substantive changes to the systems or related operations in order to ensure that the systems and operations achieve the CSD objectives. The CSD shall plan and document these tests, which shall include:

(a) scenarios of large scale disasters;

(b) switchovers between the primary processing site and secondary processing site;

(c) the participation of, as appropriate:

(i) users of the CSD;

(ii) critical utilities and critical service providers;

(iii) other CSDs and third-country CSDs;

(iv) other market infrastructures;

(v) any other institution with which interdependencies have been identified in the business continuity policy.