To BEST evaluate the effectiveness of a disaster recovery plan, the IS auditor should review the:

A. test plan and results of past tests.
B. plans and procedures in the business continuity plan.
C. capacity of backup facilities.
D. hardware and software inventory.