An IS auditor conducting a review of disaster recovery planning (DRP) at a financial
processing organization has discovered the following:
• The existing disaster recovery plan was compiled two years earlier by a systems analyst in the
organization’s IT department using transaction flow projections from the operations department.

• The plan was presented to the deputy CEO for approval and formal issue, but it is still awaiting
their attention.
• The plan has never been updated, tested or circulated to key management and staff, though
interviews show that each would know what action to take for its area in the event of a disruptive
incident.
The IS auditor’s report should recommend that:

An IS auditor conducting a review of disaster recovery planning (DRP) at a financial processing
organization has discovered the following:
• The existing disaster recovery plan was compiled two years earlier by a systems analyst in the
organization’s IT department using transaction flow projections from the operations department.
• The plan was presented to the deputy CEO for approval and formal issue, but it is still awaiting
his/her attention.
• The plan has never been updated, tested or circulated to key management and staff, though
interviews show that each would know what action to take for its area in the event of a disruptive
incident.
The basis of an organization’s disaster recovery plan is to reestablish live processing at an
alternative site where a similar, but not identical, hardware configuration is already established. An
IS auditor should:

Disaster recovery planning (DRP) for a company’s computer system usually focuses on:

The MAIN purpose for periodically testing offsite facilities is to:

A large chain of shops with electronic funds transfer (EFT) at point-of-sale devices has a central
communications processor for connecting to the banking network. Which of the following is the
BEST disaster recovery plan for the communications processor?

Facilitating telecommunications continuity by providing redundant combinations of local carrier T-1
lines, microwaves and/or coaxial cables to access the local communication loop:

Which of the following represents the GREATEST risk created by a reciprocal agreement for
disaster recovery made between two companies?

Which of the following would BEST ensure continuity of a wide area network (WAN) across the
organization?

An IS auditor reviewing an organization’s IS disaster recovery plan should verify that it is:

There are several methods of providing telecommunications continuity. The method of routing
traffic through split cable or duplicate cable facilities is called: