ID.IM-02 identifies improvements from security tests and exercises, like penetration testing or incident response simulations, often involving suppliers and third parties. These activities reveal vulnerabilities and response gaps, providing actionable insights for enhancement. Collaboration with external partners ensures a comprehensive view of shared risks.

This subcategory strengthens preparedness by using exercise outcomes to refine incident response, business continuity, and recovery plans. It encourages regular testing to keep security measures current and effective. ID.IM-02 drives improvement through practical, scenario-based learning.