CISA Certified Information Systems Auditor – Question1049

Of the following procedures for testing a disaster recovery plan (DRP), which should be used MOST frequently?

A.
Unannounced shutdown of the primary computing facility.
B. Review of documented backup and recovery procedures
C. Testing at a secondary site using offsite data backups
D. Preplanned shutdown of the computing facility during an off-peak period

Correct Answer: B