Q: How often should we test our incident response plan? A: NIST recommends testing the incident response plan at least annually. Best practice is to conduct tabletop exercises quarterly and a full ...