Funny how some policy prevented backup generators operating, during a planned outage. Surely this is a case where there should be an overarching policy of, if a situation arises where no power is available for any level of criticality, then all other policies are null and void. There should be tests for that.
Tests would be temperature monitors that alert if the temperature rises beyond a preset threshold and triggers alerts. No environmental monitoring? No alerts? Was it always assumed generators would kick on if there was a power outage?
I don't know. From what I read, the issue is that the policy prevented the generators from running during the planned outage. I was thinking tests of policy. Look for circumstances where there could be conflicts. They should have known what policies would conflict when they did the planned outage. They also talk about a communication issue, which suggests they haven't done any system tests, they just did it.