Which of the following practices would best ensure the adequacy of a disaster recovery plan?

These are steps included in business process re-engineering: a) Gain an understanding of the business process to be reviewed, b) Establish a continuous improvement process, c) Redesign and streamline the process, d) Define the areas to be reviewed, e) Implement and monitor the new process, f) Develop a project plan. What is the proper sequence of these steps?

A. d, f, a, c, e, b
B. a, f, d, c, e, b
C. f, a, d, c, e, b
D. d, a, f, c, e, b

Answer: A

Of the options, the most effective would be to regularly review the currency of information detailed in the plan, such as contact names and locations, backup frequency and content, recovery procedures, etc. Regular recovery exercises should be held, but it is better that staff who are not recovery experts are involved. This will provide better assurance that, should a disaster occur, the plan can be used by any staff available. Exercises should be planned and announced, an unplanned test, however frequently performed, will be more difficult to evaluate and is less likely to provide assurance that the plan is effective. Unannounced shut down of primary processing should not be a consideration at any time due to the potential effect on "live" processing should the recovery fail.

When developing a disaster recovery plan the criteria for determining the acceptable?

Which of the following processes is the first step in developing a business continuity and disaster recovery plan for an organization?

Which of the following is ultimately accountable for effective business continuity and disaster recovery controls?

How does disaster recovery planning ensure business continuity?