Practising the workflow itself can be helpful too.

Some years ago, we had an "incident" where one of our developers discovered he had admin access even though he was logged into a different account of his. It was a multi-tenant SaaS. Since he was supposed to be admin anyway, I wondered where the harm was.

Now, though, I think he was just practising the blameless incident response in case something serious did eventually come up. Once that happens, you don't have time to practise in peace anymore.