A plan is not considered functioning and
viable until a test has been performed. An untested plan sitting on a
shelf is useless and might even have the reverse effect of creating a
false sense of security. While the other answers are good reasons to test, they are not the primary reason.

You use the BIA as a guideline to create the contingency plan.

Application protection: Detecting and blocking security vulnerabilities and malicious activity within the application during runtime Threat intelligence: Providing deep, code-level visibility within the application and producing insights that help the security team understand who is attacking their organization, their methods and motivations.

Explanation