Which choice below is NOT considered an appropriate role for senior management in the business
continuity and disaster recovery process?

A.
Delegate recovery roles

B.
Closely control media and analyst communications

C.
Publicly praise successes

D.
Assess the adequacy of information security during the disaster recovery

Explanation:
The tactical assessment of information security is a role of information management or technology
management, not senior management. In addition to the elements of answers a, b, and c above,
senior management has many very important roles in the process of disaster recovery, including:
Remaining visible to employees and stakeholders Directing, managing, and monitoring the recovery
Rationally amending business plans and projections Clearly communicating new roles and
responsibilities Senior management must resist the temptation to participate handson in the
recovery effort, as these efforts should be delegated. Information or technology management has
more tactical roles to play, such as: Identifying and prioritizing mission-critical applications
Continuously reassessing the recovery sites stability Recovering and constructing all critical data
Source: Business Recovery Checklist, KPMG LLP 2001.