Which of the following provides the BEST evidence of an organizations disaster recovery readiness?

A. A disaster recovery plan

B. Customer references for the alternate site provider

C. Processes for maintaining the disaster recovery plan

D. Results of tests and drills

Explanation:

Plans are important, but mere plans do not provide reasonable assurance unless tested. References for the alternate site provider and the existence and maintenance of a disaster recovery plan are important, but only tests and drills demonstrate the adequacy of the plans and provide reasonable assurance of an organizations disaster recovery readiness.