Which of the following would an IS auditor consider to be the MOST important to review when
conducting a business continuity audit?
A.
A hot site is contracted for and available as needed.
B.
A business continuity manual is available and current.
C.
insurance coverage is adequate and premiums are current.
D.
Media backups are performed on a timely basis and stored offsite.
Explanation:
Without data to process, all other components of the recovery effort are in vain. Even in the
absence of a plan, recovery efforts of any type would not be practical without data to process.