How often should tests and disaster recovery drills be performed?

A.
At least once a quarter

B.
At least once every 6 months

C.
At least once a year

D.
At least once every 2 years

Explanation:
The drills should take place at least once a year, and the entire program should be continually updated and
improved.
Incorrect Answers:
A: Once a quarter would be too much. Once a year is fine.
B: Once every 6 months would be too much. Once a year is fine.
D: Once every 2 years would Be enough. Once a year is the recommended frequency.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 951