An organization has a number of branches across a wide geographical areA. To ensure that all
aspects of the disaster recovery plan are evaluated in a cost effective manner, an IS auditor should
recommend the use of a:
data recovery test.
full operational test.
A preparedness test should be performed by each local office/area to test the adequacy of the
preparedness of local operations in the event of a disaster. This test should be performed regularly
on different aspects of the plan and can be a cost-effective way to gradually obtain evidence of the
plan’s adequacy. A data recovery test is a partial test and will not ensure that all aspects are
evaluated. A full operational test is not the most cost effective test in light of the geographical
dispersion of the branches, and a posttest is a phase of the test execution process.