An IS auditor conducting a review of disaster recovery planning (DRP) at a financial processing
organization has discovered the following:
-The existing disaster recovery plan was compiled two years earlier by a systems analyst in the
organization’s IT department using transaction flow projections from the operations department.
-The plan was presented to the deputy CEO for approval and formal issue, but it is still awaiting
his/her attention.
-The plan has never been updated, tested or circulated to key management and staff, though
interviews show that each would know what action to take for its area in the event of a disruptive
incident.
The basis of an organization’s disaster recovery plan is to reestablish live processing at an
alternative site where a similar, but not identical, hardware configuration is already established. An
IS auditor should:

An IS auditor conducting a review of disaster recovery planning (DRP) at a financial
processing organization has discovered the following:
-The existing disaster recovery plan was compiled two years earlier by a systems analyst in the
organization’s IT department using transaction flow projections from the operations department.
-The plan was presented to the deputy CEO for approval and formal issue, but it is still awaiting
their attention.
-The plan has never been updated, tested or circulated to key management and staff, though
interviews show that each would know what action to take for its area in the event of a disruptive
incident.
The IS auditor’s report should recommend that:

Disaster recovery planning (DRP) addresses the:

Which of the following is a practice that should be incorporated into the plan for testing disaster
recovery procedures?

An advantage of the use of hot sites as a backup alternative is that:

An organization’s disaster recovery plan should address early recovery of:

An organization having a number of offices across a wide geographical area has developed a
disaster recovery plan. Using actual resources, which of the following is the MOST cost- effective
test of the disaster recovery plan?

Which of the following is the MOST reasonable option for recovering a noncritical system?

After implementation of a disaster recovery plan, pre-disaster and post-disaster operational costs
for an organization will:

The PRIMARY purpose of a business impact analysis (BIA) is to: