Every IT organization with some semblance of sanity has at least one crisis management or disaster recovery plan, and probably several, depending on the scope and severity of the scenario. Ranging from "one of our more important applications is experiencing issues in production" through "everything is on fire" on to total loss of data, a good crisis management or disaster recovery plan should help you retain business continuity or at the very least ensure a return to normal operations within the shortest possible timeframe. But when was the last time you actually found the time to test your plans and ability to respond to a crisis?