Without drills, how would you suggest Facebook tests the response times and standards of their security teams? If you want to know how the team will react under pressure, you essentially have two options:

- make up a fake security alert

- wait until a real attack is underway

Perhaps I'm missing something, but I do not see a connection to Office Space.