An organization has a number of branches across a wide geographical areA. To ensure that all aspects of the
disaster recovery plan are evaluated in a cost effective manner, an IS auditor should recommend the use of a:
A.
data recovery test.
B.
full operational test.
C.
posttest.
D.
preparedness test.
Explanation:
A preparedness test should be performed by each local office/area to test the adequacy of the preparedness of
local operations in the event of a disaster. This test should be performed regularly on different aspects of the
plan and can be a cost-effective way to gradually obtain evidence of the plan’s adequacy. A data recovery test
is a partial test and will not ensure that all aspects are evaluated. A full operational test is not the most cost
effective test in light of the geographical dispersion of the branches, and a posttest is a phase of the test
execution process.