# Emergency access drill

Run in an isolated environment with synthetic accounts.

Failure being simulated:
Dependency the emergency route avoids:
Authorized custodian and alternate:
Approval route:
Allowed tenant and actions:
Session expiry:
Independent alert destination:
Evidence location:

| Test | Expected result | Observed result | Reviewer |
| --- | --- | --- | --- |
| Normal IdP unavailable | Approved emergency route works | | |
| Ordinary account uses emergency route | Denied | | |
| Operator requests another tenant | Denied | | |
| Approval missing | Policy-defined denial or escalation | | |
| Privileged change | Attributable evidence recorded | | |
| Alert delivery | Approved independent contact receives alert | | |
| Session expiry | Further use denied | | |
| Closure | Temporary permissions and session removed | | |

Record drill date, implementation version, incident reference and follow-up owner.
Keep secrets and personal records out of this worksheet.