CISM Certified Information Security Manager – Question1274

What is the PRIMARY purpose of an unannounced disaster recovery exercise?

A.
To evaluate how personnel react to the situation
B. To provide metrics to senior management
C. To estimate the recovery time objective (RTO)
D. To assess service level agreements (SLAs)

Correct Answer: A