or testing contingency plans. We agree with JMD in implementing this more stringent requirement. " Department of Justice Order 2640.2D, Chapter 1, "Security Program Management," Section 9(c) requires that contingency plans be tested annually or as soon as possible after a significant change to the environment that would a