Which of the following would an IS auditor consider to be the MOST important to review when
conducting a business continuity audit?
A hot site is contracted for and available as needed.
A business continuity manual is available and current.
insurance coverage is adequate and premiums are current.
Media backups are performed on a timely basis and stored offsite.
Without data to process, all other components of the recovery effort are in vain. Even in the absence
of a plan, recovery efforts of any type would not be practical without data to process.