Change management procedures to ensure that disaster recovery/business continuity plans are
kept up-to- date can be BEST achieved through which of the following?

A.
Reconciliation of the annual systems inventory to the disaster recovery, business continuity
plans

B.
Periodic audits of the disaster recovery/business continuity plans

C.
Comprehensive walk-through testing

D.
Inclusion as a required step in the system life cycle process

Explanation:

Information security should be an integral component of the development cycle; thus, it should be

included at the process level. Choices A, B and C are good mechanisms to ensure compliance,
but would not be nearly as timely in ensuring that the plans are always up-to-date. Choice D is a
preventive control, while choices A, B and C are detective controls.