An organization has implemented a disaster recovery plan. Which of the following steps should be carried out next?

When auditing a disaster recovery plan for a critical business area, an IS auditor finds that it does not cover all the systems. Which of the following is the MOST appropriate action for the IS auditor?

Which of the following should be of MOST concern to an IS auditor reviewing the BCP?

Of the following alternatives, the FIRST approach to developing a disaster recovery strategy would be to assess whether:

An organization has a number of branches across a wide geographical area. To ensure that all aspects of the disaster recovery plan are evaluated in a cost effective manner, an IS auditor should recommend the use of a:

If the recovery time objective (RTO) increases:

Due to changes in IT, the disaster recovery plan of a large organization has been changed. What is the PRIMARY risk if the new plan is not tested?

When developing a disaster recovery plan, the criteria for determining the acceptable downtime should be the:

A lower recovery time objective (RTO) results in:

Regarding a disaster recovery plan, the role of an IS auditor should include: