Add keep and transparency

Signed-off-by: gearnode <bryan@frimin.fr>

controls/operations/incidents/OPS.INC.003_drp_testing.md

@@ -0,0 +1,29 @@
+---
+id: "OPS.INC.002"
+category: "operations/incidents"
+revision-version: 1
+revision-date: "2024-01-15"
+estimate-time: "6h"
+necessity: "mandatory"
+frameworks:
+  - name: "soc2"
+    sections: ["CC3.2", "CC5.1", "CC7.5", "CC8.1"]
+---
+
+# Test your disaster recovery plan
+
+## Purpose
+
+Having a plan with dust on it is useless. The goal of having a Disaster Recovery
+Plan is to be able to insure business continuity. As things are moving in your
+company, you need to check whether your DRP is still legit and whether you are
+able to properly run it.
+
+## Implementation
+
+At least once a year, you need to test your DRP and, if possible, improve it.
+Follow the instructions on yours and log the outcomes. Did it work?
+
+## Evidence
+
+- Link to the logs of your last test