How confident are you of standard SPD, s being able to cope with lighting strikes?. I can appreciate that transients caused by switching within the home or perhaps transients eminating from the DNO supply are easily dealt with by the SPD. But a lighting strike seems a much more aggressive proposition. Is there a particular SPD you would recommend for domestic installations?
And Regarding periodic testing of them?
It all depends on how much energy the SPD has to handle. That really is the distinction between Type 1 that are rated for the 10/350us shape of a direct hit on the system, and the Type 2 that are rated for the 8/20us shape from induced surges from something nearby being hit. So for a given peak current the Type 1 has an order of magnitude higher energy rating (and higher price tag, of course) than Type 2.
Unless you are the tallest thing around (in which case you ought to have a LPS anyway and then the regs say SPD
must be fitted and manufacturers say they must be Type 1), or at the end of a long overhead LV supply, then the Type 2 SPDs that go in to most "18th edition" CU should be fine as you are unlikely to see the sort of energy that a direct hit delivers.
The SPD can be tested with a normal IR tester, basically if they "fail" at 500V and pass at 250V then you are seeing the usual MOV characteristics. Though some Type 1 have GDT elements and only show up if you try the 1000V test (often you get a slight squealing sound as the IR tester keeps charging up its HV supply then the GDT fires discharging it and then clears, so the cycle starts again).
In situations where it matters they work, or if you live in an area with a lot of lightning activity, then checking the SPD is obviously important. When folk don't test their RCDs twice a year they could also be not checking the good/bad flags in their SPD...
While the cheaper (usually single module) SPD that come for "free" with the likes of the Fusebox CU lack it, the higher-end SPD often have the option of auxiliary change-over contacts that can be used to generate a warning that they have failed, so even multiple DB over a wide installation
could be centrally monitored. If you had a hospital, data centre, high-end engineering workshop, etc, than I think though ought to be done, but I suspect it is rare!
Edited to add: The monitor contacts are mechanically actuated by the plug-in modules, so you can test the monitoring simply by pulling a module. Handy really, as it warns you that someone has pulled a module....