We are a small community bank, too. We do "tabletop" exercises with management.
We have a number of branches, so we try to vary the scenarios as to place of disaster, who was the first responder, who or what is left, etc.
So far, this has gone well with regulators. Personally (I'm the auditor!) I'd like to see us do more testing with the "regular" people.
Make sure you document the incident tested, the people involved, some of the conversation and anything noted in the implementation of the plan that was noticed during the exercise. We get it into minutes and have the BOD review it.
I think there is a recent thread with some suggestions. (I'll look, too.) Found one - - - "Disaster Recovery Walk-thru" just down the page. Also, check the Audit forum.
Last edited by Cornfed Turtle; 02/14/07 08:11 PM.