To BEST evaluate the effectiveness of a disaster recovery plan, the IS auditor should review the: