Which of the following questions is less likely to help in assessing an organization’s contingency planning
controls?

A.
Is damaged media stored and/or destroyed?

B.
Are the backup storage site and alternate site geographically far enough from the primary site?

C.
Is there an up-to-date copy of the plan stored securely off-site?

D.
Is the location of stored backups identified?

Explanation:
Damaged media is A critical part of contingency planning.
Incorrect Answers:
B: When choosing a backup facility, it should be far enough away from the original site so that one disaster
does not take out both locations.
C: To protect against disasters a copy of the current contingency plan must be stored away from the main site.
D: To protect against disasters at least some of the backups must be stored at another location than the main
site.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 953