Which of the following would an IS auditor consider to be the MOST important to review when conducting a business continuity audit?

A. A hot site contracted and available as needed.

B. A business continuity manual is available and current.

C. insurance coverage is adequate and premiums are current.

D. Media backups are performed on a timely basis and stored offsite.

Explanation:

Without data to process, all other components of the recovery effort are in vain. Even in the absence of a plan, recovery efforts of any type would not be practical without data to process.