Many credit unions build business continuity plans but fail to take the next step. As the FFIEC explains in their most-recent BCP Booklet, “Risk monitoring ensures a BCP is viable through testing,independent review and periodic updating.” In addition, testing helps financial institutions adjust recovery time objectives by giving realistic, tested time estimates needed to complete tasks.