Which of the following provides the BKST confirmation that the business continuity/disaster
recovery plan objectives have been achieved?

A.
The recovery time objective (RTO) was not exceeded during testing

B.
Objective testing of the business continuity/disaster recovery plan has been carried out
consistently

C.
The recovery point objective (RPO) was proved inadequate by disaster recovery plan testing

D.
Information assets have been valued and assigned to owners per the business continuity plan,
disaster recovery plan

Explanation:

Consistent achievement of recovery time objective (RTO) objectives during testing provides the
most objective evidence that business continuity/disaster recovery plan objectives have been
achieved. The successful testing of the business continuity/disaster recover) plan within the stated
RTO objectives is the most indicative evidence that the business needs are being met. Objective
testing of the business continuity/ disaster recovery plan will not serve as a basis for evaluating the
alignment of the risk management process in business continuity/disaster recovery planning..
Mere valuation and assignment of information assets to owners (per the business
continuity/disaster recovery plan) will not serve as a basis for evaluating the alignment of the risk
management process in business continuity/disaster recovery planning.