An IS auditor conducting a review of disaster recovery planning (DRP) at a financial processing organization has discovered the following:
The existing disaster recovery plan was compiled two years earlier by a systems analyst in the organization’s IT department using transaction flow projections from the operations department. The plan was presented to the deputy CEO for approval and formal issue, but it is still awaiting their attention.
The plan has never been updated, tested or circulated to key management and staff, though interviews show that each would know what action to take for its area in the event of a disruptive incident.
The IS auditor’s report should recommend that:

Disaster recovery planning (DRP) addresses the:

Which of the following is a practice that should be incorporated into the plan for testing disaster recovery procedures?

An advantage of the use of hot sites as a backup alternative is that:

An organization’s disaster recovery plan should address early recovery of:

An organization having a number of offices across a wide geographical area has developed a disaster recovery plan. Using actual resources, which of the following is the MOST cost-effective test of the disaster recovery plan?

Which of the following is the MOST reasonable option for recovering a noncritical system?

After implementation of a disaster recovery plan, pre-disaster and post-disaster operational costs for an organization will:

The PRIMARY purpose of a business impact analysis (BIA) is to:

Which of the following recovery strategies is MOST appropriate for a business having multiple offices within a region and a limited recovery budget?